Ubercart

Hi Von Gunther,

I am seeing some errors when I visit the configuration page:

warning: fopen(rss.xml) [function.fopen]: failed to open stream: Permission denied in home/epicclic/public_html/sites/all/modules/uc_website_xml/uc_website_xml.module on line 473.

warning: fwrite(): supplied argument is not a valid stream resource in /home/epicclic/public_html/sites/all/modules/uc_website_xml/uc_website_xml.module on line 474.

warning: fclose(): supplied argument is not a valid stream resource in /home/epicclic/public_html/sites/all/modules/uc_website_xml/uc_website_xml.module on line 474.

Thank you!

Hi, very awesome looking contribution!

I will try installing it on one of my test sites soon and see if I can offer any feedback, or encounter any bugs

Edit: Gave it a shot and encountered this when I went to "create store feed"

Operational File Error - Can't Open File Q1De Castro Leon Ubercart Rss Feed Machine v1.0.0.0http://www.mytestsite.com/rss.xmlThis Is A Product feedenFriday, July 30, 2010 10:23 http://www.mytestsite.com/node/29 test2 25.00000 new http://www.mytestsite.com/node/30 test3 35.00000 new http://www.mytestsite.com/node/32 test4 65.00000 new

Other errors after enabling error logging -

* warning: fopen(rss.xml) [function.fopen]: failed to open stream: Permission denied in /home/mytest/public_html/sites/all/modules/ubercart/uc_website_xml/uc_website_xml.module on line 473.
* warning: fwrite(): supplied argument is not a valid stream resource in /home/mytest/public_html/sites/all/modules/ubercart/uc_website_xml/uc_website_xml.module on line 474.
* warning: fclose(): supplied argument is not a valid stream resource in /home/mytest/public_html/sites/all/modules/ubercart/uc_website_xml/uc_website_xml.module on line 474.
* warning: Cannot modify header information - headers already sent by (output started at /home/mytest/public_html/sites/all/modules/ubercart/uc_website_xml/uc_website_xml.module:473) in /home/mytest/public_html/includes/common.inc on line 148.
* warning: fopen(rss.xml) [function.fopen]: failed to open stream: Permission denied in /home/mytest/public_html/sites/all/modules/ubercart/uc_website_xml/uc_website_xml.module on line 473.
* warning: fwrite(): supplied argument is not a valid stream resource in /home/mytest/public_html/sites/all/modules/ubercart/uc_website_xml/uc_website_xml.module on line 474.
* warning: fclose(): supplied argument is not a valid stream resource in /home/mytest/public_html/sites/all/modules/ubercart/uc_website_xml/uc_website_xml.module on line 474.
* warning: Cannot modify header information - headers already sent by (output started at /home/mytest/public_html/sites/all/modules/ubercart/uc_website_xml/uc_website_xml.module:473) in /home/mytest/public_html/includes/common.inc on line 148.

When opening the .module file with my text editor: uc_website_xml.module contains characters that do not exist in code page 1252 (ANSI - Latin I). They will be converted to the system default character, if you click ok

Final Edit: Ok - I had to create my own rss.xml file manually in my root directory, then give it writable permissions. Once I did that, the module was able to open and write to it. So you need to make sure the module can create this file I suppose

The reported errors in line 473 fopen([rss.xml') is due to an error in website permissions, it then causes lines 474 and 475 to throw errors.

Make sure the modules folder is set to permissions 755 and the permissions allow drupal to write and read files in the root directory .

I am looking further into this.

The File creation problem (line 473) is due to mis configuration of webserver directory permissions.
There is no way of 'fixing' this from within Drupal, you just need to give Drupal write permissions to the webserver root.
Alternatevly use Sansui's fix, create the file rss.xml in your website root and give it write permissions.

I have re-written the file handling and messaging part for the new 'quick release' (minor) .

Pavol Kutaj messaged me that foreign language punctuation was filtered out from stock item description, this was fixed in the minor release.
He also had problems with product image links, but that is due to misconfiguration or non standard image configuration on his part .
His third comment was to ask if it is possible to use URL cloaking (hide the stock item true url path) this is not possible unfortunately.

Pavol, it is not necessary to use another sitemap creation module, this one does the job.

After installing the module and running cron I received the message:

user warning: Unknown column 'node.nid' in 'field list' query: SELECT node.nid FROM ss_uc_products INNER JOIN ss_node ON uc_products.nid = node.nid WHERE node.status = 1 in /data-web7/webs/xn--ijacie-stroje-9tc.eu/sites/all/modules/uc_website_xml/uc_website_xml.module on line 394.

and rss was empty. Can you help me?

Hi Helbo, your copy of the module is damaged, download a fresh copy and re-install. If the problem persists, check your system for viruses.

I am working on v.2 of the release this summer ... a better version is coming, in the meantime I am releasing another minor release to correct the problem of html markup turning into garbage in the feed.

Von Gunther

OK new minor release published, you need to uninstall (untick it in modules page) the old module and re-install this one.

Update:
When runing cron it will eventually display 'page not found' click the browser back button to go to your website, you will then be notified that sitemap and rss feed were created, you may also get an error 'cannot modify header information' ...
This little cosmetic problem will be fixed in the next release.

Second Update:
I had to release anothe minor release to fix the cron issue, it seemed too serious to have left for the next release.

cheers
Von Gunther

At present there is a minor bug in this application, Html ampersand codes in item description or titles result in a mal formed xml document, google rejects these mal-formed entries.
This problem has been corrected in my upcoming release.

A new feature is the addition of a facility to use Rss feed to populate the store database.
Another feature which has been implemented in my upcoming release, is the creation of a custom robots.txt file.

I am currently working on multi RSS feeds, which has been a request

Von Gunther

As you all know, or will find out very soon if you sell consumer electronics Google now requires 2 unique identifiers for ELECTRONIC categories.
Google base blog: http://googlebase.blogspot.com/2007/06/new-attribute-requirements-mpn-up...

The problem is that Ubercart only allows for ONE unique identifier called 'Product SKU or Model' (you can see this in create new product page)

To overcome this severe limitation and lack of dynamic evolutionary flexibility of the Ubercart model as it stands, there are 2 possible solutions:
- submit a patch to ubercart core or use a comma seperated multi identifier entry system for the SKU/model field.

This module will use the later solution, this new version module will be posted soon .

Hi,
i need to add taxes to the sell prices. Should look something like this in the end: sell_price = sell_price + (sell_price*19/100).

Can someone tell me where to mdoify the uc_website_xml.module file.

TSE

Hi TSE1,

change

if($product->sell_price > 0){ $output .= "<".$gg."price>" . $product->sell_price . "\n"; }

to:
if($product->sell_price > 0){ $output .= "<".$gg."price>" . ($product->sell_price*1.19) . "\n"; }

for a 19% tax , 1.20 for 20% tax and so on.

Fast and perfect

Many ThX

TSE

Does this module work for Drupal 5.x using Ubercart 1.x.

It says Array missing when trying to install at admin/build/modules

'Array Missing' messages during installation attempts relate to .info dependancies , the .

Open : uc_website_xml.info
and change This :

; $Id uc_website_xml.info,v 1.0.0.3 2010/08/06 12:30:00 decastroleon Exp $
name = "Store XML"
description = "Shop RSS Product Feed And Sitemap"
core = 6.x
dependencies[] = uc_product
package = "Ubercart - core (optional)"
version = "6.x-1.7"

To:

; $Id uc_website_xml.info,v 1.0.0.3 2010/08/06 12:30:00 decastroleon Exp $
name = "Store XML"
description = "Shop RSS Product Feed And Sitemap"
core = 5.x
dependencies[] = uc_product
package = "Ubercart - core (optional)"
version = "5.x-1.7"

Notice, that you change core from 6 to 5 , and ubercart version from 6 to 5 .

The module is being developed to provide 5 different RSS feeds : One for Pricegrabber (CSV) feed , another for GOOGLEBASE (as lately revised) , another for EBAY file exchange (CSV) RSS, an Amazon Listing Feed and a generic XML RSS feed.

Broadly, all these RSS style feeds are working perfectly on the beta, in fact google has my website now at the very top of searches for my products, so success there ...

The problems were the limitation of the Ubercart model which was solved by the workaround mentioned above in a previous post, and choosing which irtems to be included in the ebay and amazon feed.
This restrictive RSS feed can be solved by interfering with Ubercart core or through a summirised listing of all products from which the user ticks his choices for listing on Ebay.
I chose the last solution, this is were I am 'stuck' at the moment.

This is an update on the forthcoming features currently under development.

cheers Ubercarters

The module is being developed to provide 5 different RSS feeds : One for Pricegrabber (CSV) feed , another for GOOGLEBASE (as lately revised) , another for EBAY file exchange (CSV) RSS, an Amazon Listing Feed and a generic XML RSS feed.

Broadly, all these RSS style feeds are working perfectly on the beta, in fact google has my website now at the very top of searches for my products, so success there ...

The problems were the limitation of the Ubercart model which was solved by the workaround mentioned above in a previous post, and choosing which irtems to be included in the ebay and amazon feed.
This restrictive RSS feed can be solved by interfering with Ubercart core or through a summirised listing of all products from which the user ticks his choices for listing on Ebay.
I chose the last solution, this is were I am 'stuck' at the moment.

This is an update on the forthcoming features currently under development.

cheers Ubercarters

Hey Von Gunther, Just wondering how progress is coming with the module? I'd really like to see the beta. If you need any help with programming please let me know. Thanks!

At the moment I am adding a reporting facility to all the feeds , a file will be created for each feed detailing which products are missing required elements, for example UPC.., and other info on duplicate entries

As the beta version is a success i have a lot more customers and less free time to program this update, so its going to take a month or two.

I am using Drupal 5 and Ubercart 1 and was able to get past this "Array missing" thing by the above changes, except you also need to get rid of the square brackets by dependencies, i.e.,

change this
dependencies[] = uc_product

to this:
dependencies = uc_product

I do not see any menu items in the Store Administratoin > Shop Configuration after successfully activating the module. By looking at the code, I figured to navigate to this url:
https://myubercartstore.com/admin/store/settings/uc_rss_feed
There, all I see is the message below, which looks like help info. No links or settings to configure.

- The XML Store RSS Feed, Provides Information And Links To All Your Products, For Use By Search Engines, Advertising, Price Comparison Or Web Indexing And News Services
- Here You Are Given The Flexibility To Choose Exactly Which Product Information You Want To include In Your RSS Feed.

Any ideas how to get this working with an older install?
- Ubercart Does Not Cater For Used Or Graded Products, You Are Given The Option To Specify Your Items Condition

For core 6 It is not a good idea to remove the square brackets, because Drupal will be unable to assign the dependancies.
Dependancies is a Drupal ARRAY that is why it needs the square brackets.

However, perhaps in core 5 the dependancies variable was not an array, in which case great spotting keyone !

The administration menus are built based on certain arrays, since you can navigate to admin/store/settings/uc_rss_feed then i guess the arrays are built ok.

As a first step check the permissions you have, are you allowed to administer this module? Are you logged in as UID 1?

You may be better off upgrading to core 6, it is easy.

Thanks for your reply. Yes, I am logged in as UID 1. I'm afraid to upgrade because I have so many modules that took so much time to figure out how to get them to work together just right (every checkbox had to be ticked off just right). I can't be sure they will work right again after the upgrade!

I can't actually navigate there. I just figured out to type that into my browser by looking at your module code. But I can't figure out more.

Gunther! You're awesome! Thank you for all your hard work. Donation will be coming soon.

On a different note. I've got a bit of a problem. The RSS feed is not pulling the images. I've got the check box selected but it doesn't seem to be pulling the url for the images. Is there something else I need to change or add to the code to get this to work.

Regards,
John

The site I'm working on is: www.idahofly.com

Nice Website harkinj,
I can see you have spent a lot of effort to make a professional website, i would just recommend keeping the background all white, the picture of the beautiful river and the Idaho hills although fresh and attrctive is distracting when using the website.

It is difficult to know why you have problems without seeing the output, Can you post a line of the RSS output?

Regards
Von Gunther

Thank you Von,
I think I fixed the feed. The PHP code was looking at the wrong location for the images. So I changed the photo location and bam, it pulled the URL for the images.

Now I have a different problem. I'm not a PHP coder, I rely heavily on people like you for help.
Here is the problem: If you look at a line of feed and then look at my product page. It is pulling the entire product description. In my product description I have the words "Click Image To Enlarge". Is there a way to have the RSS feed ignore that section of the product description? See line of code below with link to the product page for comparison.

RSS FEED: http://www.idahofly.com/node/34 Loon Aquel Floatant Loon-F0005 Click Image To EnlargeWhether you are fishing a lake or your local steam, Aquel is the perfect floatant for you. Pronounced “ahh kwel”, this premium floatant is our biggest seller and the world’s best fly floatant available. Aquel is long lasting, silicon based and won’t melt when it’s hot or harden when it’s cold. Simply work Aquel into the body and hackle of your fly and watch your fly float like a cork. Temperature stable.PRODUCT TIP:Apply floatant to fly, then use your fingers to work floatant into the body and hackle of the fly. For best results coat your fly with Aquel, then shake in Top Ride fly dryer and floatant for the highest and longest float possible. Try some and find out why people who fish for a living use Aquel.1/2oz Standard Container4oz Guide Size Container 4.40000 http://www.idahofly.com/sites/default/files/product_images/aquel-600.jpg new

Link to product node: http://www.idahofly.com/product/loon-aquel-floatant

I appreciate your help.

The best solution would be to have imagecache or whatever image module you use take care of its own notices, you can achieve this easily, there is no reason to write in the product description 'click here to enlarge image', I like to program in an object oriented orderly and clean way, and this message in the prod.description smacks of amateurishm., I assume it is part of the theme you use.

Anyway, the solution to your problem is easy, replace line 420:

$pad = strip_tags($product->body); $pad = check_plain($pad); if (strlen($pad) >10000){$pad = substr($pad,0,10000); }

to:

$pad = strip_tags($product->body); $pad = str_replace("Click Image To Enlarge", " ", $pad); $pad = check_plain($pad); if (strlen($pad) >10000){$pad = substr($pad,0,10000); }

The new version of store RSS Feed And Sitemap is radically different it outputs various rss feeds , including pricegrabber and amazon csv feeds, it posts sitemap to various engines, and loads more....
It has put my website top of google listings for the products i sell and the geographical area.

I probably will publish it in the summer.

Hello Von,
Well you put the nail in the coffin there. I am an amateur and you said it. I'm very very new to Drupal and this project has been put together with my free time off of taking care of my twins. I started this project after being laid off from the airlines, Horizon Airlines to be exact. I'm fluent as a pilot not a programmer. So Drupal was a whole new language I had to learn, and I'm still learning. But anyways yes I'm an amateur, and I appreciate your help. So on to the issues at hand.

I was able to get the rss feeding Google Merchant Center, all is well (and thank you again for your help), but ran into the problem above and hopefully you could direct me into working with imagecash to add that text "Click Image To Enlarge" That would be very helpful.

A totally different problem has occurred now; After getting that all set up I noticed a major problem with my site map file. I've set it up to through XML Sitemap module but the module you've created is overriding the previous one I've set up. Can you help me disable your version of the sitemap generator and still keep the RSS feed? Please don't take offence of this as the customizing ability of the XML Sitemap module is what I've been after.

Regards,
John

Hi John,

You can use http://drupal.org/project/imagecache_actions imagecache actions to overlay text on top of an image.
It is not clear what your problems with sitemap are, however I assume that my program overwrites another sitemap when cron is triggered.
function sitemaprss_cron() {
change:
call_function_13();
call_function_12();
drupal_set_message('Cron Has Created Product Sitemap File and Taxonomy In Root Directory (sitemap.xml, rss.xml)');
}
to
function sitemaprss_cron() {
// cron does not trigger
call_function_13();
//call_function_12();
drupal_set_message('Cron Has Created Product Sitemap File and Taxonomy In Root Directory (sitemap.xml, rss.xml)');
}

Your website is good john, i think horizon air is going through a tough time ... good luck to your new enterprise , drupal has helped loads of people make money.
Bellevue Seattle

Hi,
I´ve installed the module, however when I click on create a rss file I get the next error: "This page contains the following errors: error on line 1403 at column 8: Encoding error"
Besides, I have xml sitemap module anthe traditional rss file that was at the root directory has been deleted.
Any idea how could I fix it?
Thank you very much!

Hi Skat,

The versions i have published are only 522 lines long, i guess the reference to line 1403probably relates to the rss xml output file.

Fundamentally, certain symbols in tem description have a special XML meaning and cause the output of an illegal XML file.

I have sorted this problem in my current version which is over 2500 lines of code, and far superior to my initial contributions.
I will probably be publishing the new version this summer .

In the mean time try to eliminate the symbol & from your item descriptions.....

Cheers

Thank you, in that case maybe is the ñ, I´m spanish. In spite of that error, do you think that the module is useful? or is better to use sitemap xml module?

Thanks again.

I do not know the sitemap XML module, but its name betrays that it is a sitemap not an RSS XML feed generator.

Best you try everything available and see what works best for you, the new version has taken care of foreign alphabet websites, but as I said It will probably be published in the summer.

Thank you very much for your answer!

Peak Into The New Module being Developed

http://dicapri.com/gallery/peak1.jpg
http://dicapri.com/gallery/peak2.jpg
http://dicapri.com/gallery/peak3.jpg

The developement module hacks into the ubercart database to add new required fields, then hacks into ubercart forms to handle these new fields.
Multiple RSS XML and CSV feeds - Google Base, Pricegrabber , Generic
Automated Ebay listing from one's website
Automated Amazon listing from ones' website

It looks very good!! I look forward to testing it.

Many thanks!

Subscribing

Any news on when this may be ready?

I just spent the day trying to tweak my Ubercart to play nice with google shopping and I stumbled across this module. I found a couple problems though. The first one was that the rss.xml generated overwrote my original rss.xml so I changed the file output name everywhere it appeared to product_rss.xml for clarity and uniqueness. I also renamed sitemap.xml to product_sitemap.xml so it wouldn't overwrite the file generated by the XML Sitemap module. That fixed the first problem, but then after reading the page source of product_rss.xml I saw that it was missing the tag which is required by google shopping. The only requirement for that value was that you have a unique value for each product, so I just used the title which has to be unique anyway. Here's the code chunk I edited:

411 if (variable_get("rss_item_title",'1') == 1) {
412 $pad = strip_tags($product->title); $pad = check_plain($pad); if (strlen($pad) >69){$pad = substr($pad,0,70); }
413 $output .= "" . $pad . "\n";
414 $output .= "" . $pad . "\n";

Now the rss feed meets all of google's criteria. I submitted my link and google was happy and that makes me happy. This might be a bit of an ugly hack, but it works. I've repackaged and published the module on my site in case anybody else wants to use it or incorporate it into the original module or just use it for creative inspiration. Here's the link: http://zapcomputing.net/sites/default/files/uc_website_xml_id.tar.gz
Maybe someone else can put this to good use.

Well I got my feed published last night, but the image tags aren't being output. Someone in irc said it might be this code:

433 if (variable_get("rss_item_picture",'0') == 1) {
434 if (isset($product->field_image_cache) && file_exists($product->fiel d_image_cache[0]['filepath'])){
435 $output .= "<".$gg."image_link>" . $GLOBALS['base_url'] .'/'. ($product ->field_image_cache[0]['filepath']) . "\n";
436 }
437 }

I was told to try changing it to this:

436 if (variable_get("rss_item_picture",'0') == 1) {
437 if (isset($product->field_image_cache) && file_exists('./' . $produc t->field_image_cache[0]['filepath'])){
438 $output .= "<".$gg."image_link>" . $GLOBALS['base_url'] .'/'. ($product ->field_image_cache[0]['filepath']) . "\n";
439 }
440 }

which didn't work.

Here's another link that may explain the issue: http://www.php.net/manual/en/function.file-exists.php#93572

I'm new to Drupal development, so I'm not surprised that I couldn't get it. Maybe someone else has a better idea.

Hi zapcomputing,

The development module is now very different from the one I have published here, which is an extremely simpler product.

Regarding the output of your images, the php issue you raise is not applicable, as drupal provides the physical path.
The problem seems to be that you have not ENABLED image output , go to the module RSS feed set up page and tick the image box.

From the RSS set up page you can specify the name you want the rss feed to have (i believe the old module had this capability, the new one certainly does, but you have to wait for August for it to be published)

The module already outputs the title, I think your problem is that you installed the first version, try version 3.

Also the unique data field is model/sku which HAS to be unique , the title does not have to be unique , anyway both are already catered for .

I really do not see what problems you have? You seem to be solving a problem that does not exist .....

By the way line : 434 if (isset($product->field_image_cache) && file_exists($product->fiel d_image_cache[0]['filepath']))
has been tampered , there is an extra space $product->fiel d_image change to $product->field_image

I just installed the 1.0.0-3 version and for the most part, it appears to be working ok... What's kind of baffling me though, is why it is pulling in a bunch of duplicates? My Google Base dashboard shows that I have around 180 products being listed, out of 5100 that are in the rss.xml feed. Looking at the feed, I do indeed have a BUNCH of duplicates. The only reason I can figure is that I have the same product listed on several different taxonomy terms. (some products are accessories that can go with a multitude of other products)

The only other thing that worries me, is the sitemap portion of the feed. I use XMLSitemap and at this point, don't see any issues with the two conflicting, but I'm worried they might decide they don't want to play nice when I'm not looking... What are the general thoughts on this?

From my understanding, a new re-worked version is up and coming and I can wait, but I'm just making sure I'll be good with this version until then.

Thoughts?

The program goes through all the product (nodes) and adds each to an RSS feed, duplicates mean you have duplicate products, unfortunately this early version of RSS feed does not associate a product to a hierarchic category (taxonomy).
I do not think there is a better Ubercart RSS feed module at the moment, nontheless this module is very dated.

The version 2 in development has a database maintenance to remove rogue nodes, images etc . I found that in order to have an RSS feed of high integrity the database needed sorting, as various ubercart modules are buggy and leave duplicate entries floating in the database etc...

Since this module wasn't quite doing it for me, I went ahead and created a view that outputs to a .xml file and is working quite nicely for me. I found a crude explanation on how to do it at:
http://www.dzieyzone.com/content/06-07-2010/publish-ubercart-product-goo...

Going the views route, I no longer have duplicates, the pictures work and it "should" be pretty easy to include some of the upcoming summer 2011 changes that are about to take place.

I'm still looking forward to your v2.0 version though and will definitely test it out when it's available : )

this module works really well - thanks so much! One problem I found is Google rejected the feed due to a missing ID element. This is a required field. Here is what it said after processing my XML feed:

Missing required attribute: id

I got around this by simply adding the ID field to the "uc_website_xml.module" file and populating it using the model number. Here is the code I added (after line 417):

$output .= "<".$gg."id>" . check_plain($product->model) . "</".$gg."id>\n";

If this could be added to any future release that would be great. One other feature request is the module uses the node ID as the URL. Can this be changed to use the URL alias instead? So instead of this:

<link>http://mysite.com/node/120</link>

It shows as this:

<link>http://mysite.com/my-product-name</link>

thanks

Jason

Hi there

looks like a great module - maybe i am missing something, people seem to be commenting on V2 however I cannot see this as available.

Can you please advise?
thanks

susie

Go up the top and click 'view all releases' .

I will post a completely revamped module soon 1 month or 2
I am working on Drupal 7 commerce kickstart which sets up the commerce module like ubercart (but with superior performance) , adding a new Store rss feed module by default.

This module is retro, liike ubercart is going to be in a year.

Hi Von
My apologies expected to see 2.0.0.0 as opposed to 1.0.0.2.

Thanks for the info - will most likely wait and install your new version later this summer.

Sue

If you want to use the URL Alias, you should change line 410 to this:

$output .= "" . $GLOBALS['base_url'] . '/' . $product->path . "\n";

Hi peeps! Hoping someone can help I have installed and set up V2 of this module and is working fine, or so I thought! Only problem I have is the RSS feed set up page is just not there! The rss.xml sitemap has been created and in my menus I have all the pages stated above in the previous posts except the RSS feed set up page which means I can't set up the rss feed attributes.

I have tried manually entering the URL www.mydomain.co.uk/admin/store/settings/uc_rss_feed but it tells me Access denied.

Any help would be most helpful.

Thanks,

Gary.

Go to permissions and give yourself permissions to access the page

Thanks Von for coming back to me, I have just checked this and I have every box checked in permissions for me as site admin and store admin. Still nothing, am I missing something?

admin/store/uc_rss_feed creates an xml file and also prints the xml document to the browser screen.

If you cannot see the xml file check/update your browser.
If you get 'access denied' it is lack of permissions full stop.

Set correct permissions, Log off clear your cookies etc and log on again.
Try another browser if problem persists, i favour firefox and googlechrome.
If all that does not work check to see if you have hackers, for example russians etc becoming members of your uk website, there is a major security risk at present where becoming a member and changing the password allows code injection, you can then mess up permissions and naurally the owner is locked out while you hack using uid 1.