• Registered: 2013-01-31
  • Posts: 6

Topic: Help with broken gallery?

I have been trying to work this out for about 2 days now and I just can't understand it.  I have created JB galleries in the past without any issue at all...

such as

http://www.ashworthphotography.co.uk/ga … ommercial/
http://www.ashworthphotography.co.uk/galleries/product/

I have been creating some new ones for a new site and for some reason I just can't get them to work.  The code is there its just that no gallery shows up - its shows on my computer when I look at the gallery on my local drive but once uploaded it fails to show

http://www.ashworthphotography.co.uk/conference2/

i thought it may have been the server as I had created a new domain

http://www.markashworth.co.uk/portfolio/food/

when you view the source code in Apple Safari browser it suggests that there is some code thats wrong - but I don't understand this as I don't think i am doing anything different to create the galleries.  I do remember adobe upgrading Air recently though and not sure if this is what the issue is?

  • Registered: 2012-04-24
  • Posts: 5,906

Re: Help with broken gallery?

The problem appears to be with the location of your 'juicebox.js' file (or perhaps the entire 'jbcore' folder) on your web server.

According to the embedding code in your 'conference2' gallery, the corresponding 'juicebox.js' file should be located here:
http://www.ashworthphotography.co.uk/co … uicebox.js
... but going directly to that location in a browser results in an error 404 (file not found).

Likewise for your 'food' gallery.
According to the embedding code for this gallery, the 'juicebox.js' file should be located here:
http://www.markashworth.co.uk/portfolio … uicebox.js

Please double-check that you have uploaded the 'jbcore' folders to the correct locations on your web servers.

As you already have a 'jbcore' folder uploaded to the following location on your 'ashworthphotography.co.uk' domain:
http://www.ashworthphotography.co.uk/ga … al/jbcore/
.. you could point towards the 'juicebox.js' file in that 'jbcore' folder for your 'commercial2' gallery (as it is on the same domain).
For your 'commercial2' gallery, you could change:

<script src="jbcore/juicebox.js"></script>

... to:

<script src="/galleries/commercial/jbcore/juicebox.js"></script>

However, if you just upload a complete 'jbcore' folder to the following two directories, your galleries should display fine (without having to alter any embedding code).
(1) http://www.ashworthphotography.co.uk/conference2/
(2) http://www.markashworth.co.uk/portfolio/food/

If you already have 'jbcore' folders in these locations, then please check the permissions of the files and subfolders within them. Default permissions of 755 for folders and 644 for files should be fine.

  • Registered: 2013-01-31
  • Posts: 6

Re: Help with broken gallery?

I found out from my web server tech support that the reason the file isn't present is that after being scanned by virus software on the server it is being rejected and deleted because it can sense there is possible malicious code in the .js file.  Obviously my previous galleries were created with an earlier version so I am not sure whats happened.  I will email the .js file to you

  • Registered: 2012-04-24
  • Posts: 5,906

Re: Help with broken gallery?

Please let me reassure you that there is no malicious code hidden within the 'juicebox.js' JavaScript file.
The file may be flagged by your web server's security software simply because the fie is packed and obfuscated.

I have just run the latest version of the 'juicebox.js' file (from the Juicebox-Pro v1.4.4.2 package) through VirusTotal online (which scans the file with 57 up-to-date different virus checkers) and the results are 100% clean.
Here are the results.

There is a (slim) possibility that your website has been compromised and that your own 'juicebox.js' file has been modified (perhaps via code injection).
If you want to check the integrity of your 'juicebox.js' file, then it should have the following properties.
Filename: 'juicebox.js'
File size: 221,137 bytes
MD5: a61d712ea57a74cdc524d108aa5aebe1
SHA1: 9ee2dd3ab20bc5fc95b3433fa2c6fbb546479864

You can check the MD5 and SHA1 hashes with a (free) program such as HashCalc.

As long as your own 'juicebox.js' file matches the properties above, then it is OK and you might need to ask your web host to prevent this false positive result from affecting your web site.

  • Registered: 2013-01-31
  • Posts: 6

Re: Help with broken gallery?

I sent you reply to my domain host and they responded as follows - looks like I have to find an alternative option for my galleries.

___________________________________________________

Thank you for reporting an issue uploading certain files via FTP.

These files are being rejected by ClamAV, the industry-standard anti-virus and anti-malware software that we use on all our FTP and mail servers.

The logs show that they are being rejected with the following diagnosis:

Uploaded by : ashworthphotography.co.uk
Attempted file : /mnt/website/standard/a/s/ashworthphotography.co.uk/web/test-juicebox/jbcore/juicebox.js
Detected as : PUA.Win.Tool.Packed-176


Unfortunately, as these virus signatures are part of the Clam distribution, we will not be removing or modifying them to accomodate any uploads. We will also not whitelist your domain to bypass anti-virus scans, as these are an important part of securing the hosting space.

If you believe that this report is a false-positive, then you need to submit the file being flagged as malware to the vendor, using their online form at https://www.clamav.net/reports/fp

They will then analyse it, and if they agree that it is indeed a false-positive, an exception rule will be created and added to their database for distribution globally.

If this happens, this will be added to our own installation of ClamAV when the next update is run. We run updates multiple times per day so that we are always current with virus signature databases.

  • Registered: 2012-04-24
  • Posts: 5,906

Re: Help with broken gallery?

Thank you for the reply.
I have filed false positive reports for both the Lite and Pro 'juicebox.js' files so hopefully ClamAV will exclude them from their detection list very soon.
It seems strange that ClamAV is one of the antivirus tools that VirusTotal includes and yet nothing (not even a false positive) is detected via the online scanner (with a virus database dated 31 March 2016).

  • Registered: 2013-01-31
  • Posts: 6

Re: Help with broken gallery?

I don't really understand the details of the reasons why it doesnt work - its just a shame that such a great gallery generator now isn't working for me.  Hopefully you will keep me informed that it will work again.

  • Registered: 2012-04-24
  • Posts: 5,906

Re: Help with broken gallery?

I don't really understand the details of the reasons why it doesnt work...

In a nutshell, you are unable to upload the 'juicebox.js' file to your web server because your web host scans all files with ClamAV and ClamAV thinks (incorrectly) that the file contains malware and immediately deletes it.
Without the 'juicebox.js' file in place, the gallery will not work.

I have done all I can (by filing false positive reports to ClamAV) and hope that ClamAV will exclude the Lite and Pro 'juicebox.js' files from being flagged as malware in a database update very soon.

Unfortunately, unless ClamAV contact me directly (they have my email address) I have no way of knowing if or when this has been done.
Also, without being able to reproduce the problem, I cannot tell if it has been fixed.
I do not have access to a web server that uses ClamAV and the online scanners that use ClamAV seem to give the 'juicebox.js' files a clean bill of health.

Being that your web host updates their ClamAV database several times a day, the best I can suggest is that you periodically try to upload your 'juicebox.js' file to your web server and see if it works. (It should take less than a minute to check.)

If or when I hear anything back from ClamAV, I will be sure to post back in this thread.

  • Registered: 2013-01-31
  • Posts: 6

Re: Help with broken gallery?

Thanks for your help Steven - my fingers are crossed!

  • Registered: 2012-04-24
  • Posts: 5,906

Re: Help with broken gallery?

Three weeks have passed and I have had not heard directly from ClamAV regarding the false positive reports I filed but there have been 23 ClamAV virus database updates in this period so, if you have not tried recently, it might be worth uploading a Juicebox album to your web server now to see if it works.
If you do try again, please let me know how you get on.
Thank you.