chevereto | side software for creating multi

by Chevereto PHP Version: Current License: MIT

X-Ray Key Features Code Snippets Community Discussions(1)Vulnerabilities Install Support

kandi X-RAY | chevereto Summary

chevereto is a PHP library. chevereto has no bugs, it has a Permissive License and it has low support. However chevereto has 4 vulnerabilities. You can download it from GitHub.

Subscribe to the newsletter to don't miss any update regarding Chevereto. Chevereto is a server-side software for creating a multi-user, full-featured media sharing solution. It is headless, providing a both auto-mapped and self-described REST API that allows to use it under many different situations and use cases. It's your application. Your rules, your eyes. Say goodbye to closures, restrictions and data mining on your media.

Support

Quality

Security

License

Reuse

Support

chevereto has a low active ecosystem.

It has 17 star(s) with 5 fork(s). There are 3 watchers for this library.

It had no major release in the last 6 months.

chevereto has no issues reported. There are no pull requests.

It has a neutral sentiment in the developer community.

The latest version of chevereto is current.

Quality

chevereto has no bugs reported.

Security

chevereto has 4 vulnerability issues reported (0 critical, 0 high, 4 medium, 0 low).

License

chevereto is licensed under the MIT License. This license is Permissive.

Permissive licenses have the least restrictions, and you can use them in most projects.

Reuse

chevereto releases are not available. You will need to build from source code and install.

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of chevereto

Get all kandi verified functions for this library.

chevereto Key Features

No Key Features are available at this moment for chevereto.

chevereto Examples and Code Snippets

No Code Snippets are available at this moment for chevereto.

Community Discussions

Trending Discussions on chevereto

upload images useing the chevereto api with php

QUESTION

upload images useing the chevereto api with php

Asked 2020-May-30 at 05:30

i am trying to upload images from my server to the img server where chevereto is installed but i cant get it to work

here is my code so far :

...

ANSWER

Answered 2020-May-30 at 05:30

You are using a POST request method, but you are sending the source parameter in URL. The $data in your URL is base64 encoded, which results in a very large string. That's why you are getting the error 414 Request-URI Too Large.

Solution:

You should change the params to JSON body using the same POST method.

From the documentation of chevereto that you provided it is made clear.

API v1 calls can be done using the POST or GET request methods but since GET request are limited by the maximum allowed length of an URL you should prefer the POST request method.

So use POST method with JSON Body containing the parameters as key:value pair. That will solve the issue.

Sample PHP Code:

Source https://stackoverflow.com/questions/62097636

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

CVE-2018-12030 MEDIUM

Chevereto Free before 1.0.13 has XSS.

https://github.com/Chevereto/Chevereto-Free/commit/159daeab6adfe828bd06e6e74f5b647bf9b1bb70

https://edricteo.com/chevereto-free-xss-vulnerability-in-version-1.0.12/

CVE-2017-1000058 MEDIUM

Stored XSS vulnerabilities in chevereto CMS before version 3.8.11, one in the user profile and one in the Exif data parser.

https://chevereto.com/changelog

CVE-2012-2919 MEDIUM

Directory traversal vulnerability in Upload/engine.php in Chevereto 1.9.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) in the v parameter.

http://www.securityfocus.com/bid/53448

http://packetstormsecurity.org/files/112585/Chevreto-Upload-Script-Cross-Site-Scripting-User-Enumeration.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/75477

CVE-2012-2918 MEDIUM

Cross-site scripting (XSS) vulnerability in Upload/engine.php in Chevereto 1.91 allows remote attackers to inject arbitrary web script or HTML via the v parameter.

http://www.securityfocus.com/bid/53448

http://packetstormsecurity.org/files/112585/Chevreto-Upload-Script-Cross-Site-Scripting-User-Enumeration.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/75476

Install chevereto

You can download it from GitHub.
PHP requires the Visual C runtime (CRT). The Microsoft Visual C++ Redistributable for Visual Studio 2019 is suitable for all these PHP versions, see visualstudio.microsoft.com. You MUST download the x86 CRT for PHP x86 builds and the x64 CRT for PHP x64 builds. The CRT installer supports the /quiet and /norestart command-line switches, so you can also script it.

Support

The project is under alpha development and is not recommended to use it for production yet. However, developers (and those wanting to become) are welcome!.

Find more information at: