youtube embed fail

trying to put an embed link from youtube. Keep getting Failed error.

Are you putting this Embed URL in a video album or somewhere else? Can you provide the link you are try to embed?

Chris

http://www.youtube.com/watch?v=yzqTFNfeDnE

i am trying to embed it into an album

So when you choose the embed option, paste the link, hit the enter key, it displays an error of "failed"? Does this happen with all Youtube videos? Are you able to upload other videos without error?

yep, any link it says video upload failed.

Ok, so what about the last question, can you upload other videos with no problem?

nope, i dont even see a video in the approval que.

Here's the problem.  The description is posting a security attack due to the speical characters in the description field.  Boonex needs to fix this so that it can process or you need to take out all special characters. Here is the email on that particular video:

Total impact: 18
Affected tags: xss, csrf

Variable: REQUEST.description | Value: (Official video from the creator.) Visuals set to the audio of the famous sermon \"Seven Way King\" (aka That\'s My King) as spoken by Dr. SM Lockridge. The audio is slightly edited for a better flow in the video. The music in the background was performed live by the GCC band while the video played on the screens. It then led directly into the worship song \"Here is Our King\" (To see the performance in it\'s entirety go here: gccwired.com/mediaplayer/playeropener.asp?id=478 ) Created entirely ...
Impact: 9 | Tags: xss, csrf
Description: finds attribute breaking injections including whitespace attacks | Tags: xss, csrf | ID: 2
Description: Detects JavaScript with(), ternary operators and XML predicate attacks | Tags: xss, csrf | ID: 7

Variable: POST.description | Value: (Official video from the creator.) Visuals set to the audio of the famous sermon \"Seven Way King\" (aka That\'s My King) as spoken by Dr. SM Lockridge. The audio is slightly edited for a better flow in the video. The music in the background was performed live by the GCC band while the video played on the screens. It then led directly into the worship song \"Here is Our King\" (To see the performance in it\'s entirety go here: gccwired.com/mediaplayer/playeropener.asp?id=478 ) Created entirely ...
Impact: 9 | Tags: xss, csrf
Description: finds attribute breaking injections including whitespace attacks | Tags: xss, csrf | ID: 2
Description: Detects JavaScript with(), ternary operators and XML predicate attacks | Tags: xss, csrf | ID: 7

REMOTE_ADDR: xxxx
HTTP_X_FORWARDED_FOR: 
HTTP_CLIENT_IP: 
SCRIPT_FILENAME: /public_html/modules/index.php
QUERY_STRING: r=videos/albums/my/add_objects
REQUEST_URI: /m/videos/albums/my/add_objects
QUERY_STRING: r=videos/albums/my/add_objects
SCRIPT_NAME: /modules/index.php
PHP_SELF: /modules/index.php

Ticket added: http://www.boonex.com/trac/dolphin/ticket/1545

Please make sure that your ffmpeg binary is executable and match your OS. By default there is ffmpeg for linux OS only. If you have windows OS then you need to download ffmpeg separately.

Yes, for now ffmpeg is used for embed videos too.

Try to rise the following Advanced Settings -> Other:

Total security impact threshold to send report and block aggressor:

Total security impact threshold to send report

Total impact: 18
Affected tags: xss, csrf

Variable: REQUEST.description | Value: (Official video from the creator.) Visuals set to the audio of the famous sermon \"Seven Way King\" (aka That\'s My King) as spoken by Dr. SM Lockridge. The audio is slightly edited for a better flow in the video. The music in the background was performed live by the GCC band while the video played on the screens. It then led directly into the worship song \"Here is Our King\" (To see the performance in it\'s entirety go here: gccwired.com/mediaplayer/playeropener.asp?id=478 ) Created entirely ...
Impact: 9 | Tags: xss, csrf
Description: finds attribute breaking injections including whitespace attacks | Tags: xss, csrf | ID: 2
Description: Detects JavaScript with(), ternary operators and XML predicate attacks | Tags: xss, csrf | ID: 7

Variable: POST.description | Value: (Official video from the creator.) Visuals set to the audio of the famous sermon \"Seven Way King\" (aka That\'s My King) as spoken by Dr. SM Lockridge. The audio is slightly edited for a better flow in the video. The music in the background was performed live by the GCC band while the video played on the screens. It then led directly into the worship song \"Here is Our King\" (To see the performance in it\'s entirety go here: gccwired.com/mediaplayer/playeropener.asp?id=478 ) Created entirely ...
Impact: 9 | Tags: xss, csrf
Description: finds attribute breaking injections including whitespace attacks | Tags: xss, csrf | ID: 2
Description: Detects JavaScript with(), ternary operators and XML predicate attacks | Tags: xss, csrf | ID: 7

REMOTE_ADDR: xxxx
HTTP_X_FORWARDED_FOR: 
HTTP_CLIENT_IP: 
SCRIPT_FILENAME: /public_html/modules/index.php
QUERY_STRING: r=videos/albums/my/add_objects
REQUEST_URI: /m/videos/albums/my/add_objects
QUERY_STRING: r=videos/albums/my/add_objects
SCRIPT_NAME: /modules/index.php
PHP_SELF: /modules/index.php

Does raising the security threshold allow the action the person is trying to do or just prevent the email from sending?  If it merely prevents the email from sending then your missing the point.  The special characters in the description field taken from youtube cause the error.  I can embed other videos that do not have the special characters.

i'm not gettinh any error messages through email at all. It just doesn't upload the video file and it just gives me a video upload failed error when posting youtube links.

Ok, I tried to upload that same youtube video and it doesnt work. If you would like to know why, it because of the description. This is what it puts in the description:

(Official video from the creator.) Visuals set to the audio of the famous sermon "Seven Way King" (aka That's My King) as spoken by Dr. SM Lockridge. The audio is slightly edited for a better flow in the video. The music in the background was performed live by the GCC band while the video played on the screens. It then led directly into the worship song "Here is Our King" (To see the performance in it's entirety go here: gccwired.com/mediaplayer/playeropener.asp?id=478 ) Created entirely ...

That will not work. It will cause Possible Attack errors and not let you proceed. I verified that I got a PA email regarding it.

You need to take out the special characters and hyperlinks in the description OR just shorten it a bit.

Like this (it works like this):

Visuals set to the audio of the famous sermon "Seven Way King" as spoken by Dr. SM Lockridge. The audio is slightly edited for a better flow in the video. The music in the background was performed live by the GCC band while the video played on the screens. It then led directly into the worship song "Here is Our King".

Chris

If you see that higher threshold stops real attack and passes description with special characters and links, then just do it. The default settings are pretty low just for sure and may be higher I think.

The reason you may not be getting the emails is because you may not have your email address setup in Cron Jobs. If you enter your cPanel, click Cron Jobs, click either of the styles. Look in the box at the top called "Mail To:" and see if you email address is in there. Usually be default, its just your login name.

Chris

hi chris,

Just now getting a chance to get back on and catch up. Apparently when I did the upgrade to RC2 itchanged my ffmpeg permissions. After going back and reading the string of comments I set it back to 777, now everything is working. I even have some apps that are now asking for registartion in the Flash Apps module, which weren't before. Not sure if all that had to do with ffmpeg or not, but video upload and embed appear to be working.

ok strike that, yotube works fine, however when uploading a video file (wmv), after approval through the admin panel, i still get a FILE NOT FOUND error.

you need to check your cron job. make sure of your php binary location on the server, and also make sure that your cron is processing.

Regards,

DosDawg

* * * * * /ramdisk/bin/php5 -q /home2/thechur3/public_html/thechurchyard.net/periodic/cron.php

is what it is set to currently. I am a beginner at all this. How should it be set?

Are you sure is /ramdisk/bin/php5 ?

usually, it just php with no 5 after it. I could be wrong, just depends on your host. The rest looks fine. You may also have to put /local/ in there. Like this

/ramdisk/local/bin/php5

But to give you an idea, here it what mine looks like:

/usr/local/bin/php -q /home/mysite/public_html/periodic/cron.php

Chris

this is the email i get from the current cron job:

Date:      Wed, 02 Dec 2009 08:08:02 -0700 [08:08:02 AM MST]
From:     Cron Daemon <root@host249.hostmonster.com>
To:     cron@thechurchyard.net
Subject:      Cron <thechur3@host249> /ramdisk/bin/php5 -q /home2/thechur3/public_html/thechurchyard.net/periodic/cron.php
Headers:     Show All Headers
No input file specified.

PM me your cPanel login info and I will check your Cron Job configuration.

Chris

I have changed your Cron Job configuration. Try to upload a video (under 3 MBs) and see if it will process now. Please give it up to 5 minutes to process.

Chris

nope no good, still get Error! File not Found.

Di you change the Cron Job back to what it was? The changes I made are not there anymore and its back to the original.

Chris

CRAP! I was logged in to hostmonster when you were there, can you try it again, i am logged out now.

no to answer your question, i do not know enough to change it.

OMG Its Fixed.. LOL. Videojme, I don't think I have ever came across such as problem with cron jobs before. Yours was a little bugger. Anyways Let me describe what I had to do.

Everytime I would change your Cron Job configuration, it would automatically change back. (Must be a Hostmonster thing)

Did some researching that may help some other folks so I will post it here.

If your host uses the /ramdisk/bin/php5 (like Hostmonster) instead of the /usr/local/bin and your videos will not process, then you may need to tell ramdisk to use your local php.ini file to gets its configurations. This is the command I had to set your cron jobs to get the to work:

/ramdisk/bin/php5 -c /home2/yoursite/public_html/php.ini -q /home2/yoursite/public_html/periodic/cron.php

I was able to successfully upload videos and they successfully processed!

Enjoy!

Chris