Can't download the attachment with error "Internal Server Error" after click the download button

[Rank-Admin]

Page on which it happened

User can't download the attachment

Steps to reproduce

1. open any password objects that have attachment
2. click on download button
3. the page show "Ïnternal Server Error"

Expected behaviour

The file should be downloaded and can view the deta in that file

Actual behaviour

it show the error "Internal Server Error"

Server configuration

Operating system: Linux 3.10.0-1160.76.1.el7.x86_64 #1 SMP Wed Aug 10 16:21:17 UTC 2022 x86_64

Web server: Apache

Database: 5.5.68-MariaDB

PHP version: 7.4.30

Teampass version: 3.0.0.20

Teampass configuration file:

'max_latest_items' => '10',
'enable_favourites' => '1',
'show_last_items' => '1',
'enable_pf_feature' => '0',
'log_connections' => '0',
'log_accessed' => '1',
'time_format' => 'H:i:s',
'date_format' => 'd/m/Y',
'duplicate_folder' => '0',
'duplicate_item' => '0',
'number_of_used_pw' => '3',
'manager_edit' => '1',
'cpassman_dir' => '/var/www/teampass',
'cpassman_url' => 'https://<anonym_url>
'favicon' => 'https://<anonym_url>/favicon.ico',
'path_to_upload_folder' => '/var/www/teampass/upload',
'url_to_upload_folder' => 'https://abc.com/upload',
'path_to_files_folder' => '/var/www/teampass/files',
'url_to_files_folder' => 'https://abc.com/files',
'activate_expiration' => '0',
'pw_life_duration' => '0',
'maintenance_mode' => '0',
'enable_sts' => '0',
'encryptClientServer' => '0',
'cpassman_version' => '3.0.0.20',
'ldap_mode' => '1',
'richtext' => '0',
'allow_print' => '0',
'show_description' => '1',
'anyone_can_modify' => '0',
'anyone_can_modify_bydefault' => '0',
'nb_bad_authentication' => '0',
'utf8_enabled' => '1',
'restricted_to' => '0',
'restricted_to_roles' => '0',
'enable_send_email_on_user_login' => '0',
'enable_user_can_create_folders' => '0',
'insert_manual_entry_item_history' => '0',
'enable_kb' => '1',
'enable_email_notification_on_item_shown' => '0',
'custom_logo' => 'https://<anonym_url>/smart_mobile.jpg',
'custom_login_text' => 'Smart Username',
'default_language' => 'english',
'send_stats' => '0',
'get_tp_info' => '1',
'send_mail_on_user_login' => '0',
'nb_items_by_query' => 'auto',
'enable_delete_after_consultation' => '0',
'enable_personal_saltkey_cookie' => '0',
'personal_saltkey_cookie_duration' => '31',
'email_smtp_server' => '<removed>'
'email_smtp_auth' => 'false',
'email_auth_username' => '<removed>'
'email_auth_pwd' => '<removed>'
'email_port' => '25',
'email_from' => '<removed>'
'email_from' => '<removed>'
'pwd_maximum_length' => '40',
'google_authentication' => '0',
'delay_item_edition' => '0',
'allow_import' => '0',
'proxy_ip' => '<removed>'
'proxy_port' => '',
'upload_maxfilesize' => '10mb',
'upload_docext' => 'doc,docx,dotx,xls,xlsx,xltx,rtf,csv,txt,pdf,ppt,pptx,pot,dotx,xltx',
'upload_imagesext' => 'jpg,jpeg,gif,png',
'upload_pkgext' => '7z,rar,tar,zip',
'upload_otherext' => 'sql,xml',
'upload_imageresize_options' => '1',
'upload_imageresize_width' => '800',
'upload_imageresize_height' => '600',
'upload_imageresize_quality' => '90',
'use_md5_password_as_salt' => '0',
'ga_website_name' => 'SmartSecret',
'send_stats_time' => '0',
'tree_counters' => '0',
'item_extra_fields' => '0',
'ldap_type' => 'ActiveDirectory',
'ldap_ssl' => '0',
'ldap_tls' => '0',
'ldap_elusers' => '0',
'copy_to_clipboard_small_icons' => '0',
'settings_offline_mode' => '0',
'offline_key_level' => '0',
'can_create_root_folder' => '0',
'ldap_suffix' => '',
'ldap_domain_dn' => '',
'ldap_domain_controler' => '',
'timezone' => 'Asia/Phnom_Penh',
'menu_type' => 'context',
'ldap_user_attribute' => 'samaccountname',
'email_post' => '25',
'api' => '1',
'subfolder_rights_as_parent' => '1',
'show_only_accessible_folders' => '0',
'enable_suggestion' => '0',
'enable_attachment_encryption' => '1',
'ldap_bind_dn' => '',
'item_duplicate_in_same_folder' => '1',
'roles_allowed_to_print' => '0',
'email_security' => '',
'enable_email_notification_on_user_pw_change' => '0',
'email_server_url' => '',
'otv_expiration_period' => '7',
'default_session_expiration_time' => '60',
'duo' => '0',
'enable_server_password_change' => '0',
'bck_script_path' => '/backups',
'bck_script_filename' => 'bck_cpassman',
'syslog_enable' => '0',
'syslog_host' => '',
'syslog_port' => '',
'saltkey_ante_2127' => 'wP3UEsJFm745WXUVRmJK3Cs7UmKB',
'teampass_version' => '2.1.27',
'migration_to_2127' => 'done',
'manager_move_item' => '0',
'create_item_without_password' => '0',
'send_statistics_items' => '',
'agses_authentication_enabled' => '0',
'personal_saltkey_security_level' => '0',
'ldap_new_user_is_administrated_by' => '0',
'ldap_port' => '389',
'enable_http_request_login' => '0',
'otv_is_enabled' => '0',
'ldap_and_local_authentication' => '1',
'secure_display_image' => '0',
'upload_zero_byte_file' => '0',
'upload_all_extensions_file' => '1',
'files_with_defuse' => 'done',
'ga_reset_by_user' => '1',
'admin_2fa_required' => '0',
'ldap_new_user_role' => '',
'password_overview_delay' => '4',
'roles_allowed_to_print_select' => '',
'clipboard_life_duration' => '30',
'mfa_for_roles' => '',
'settings_tree_counters' => '0',
'enable_massive_move_delete' => '0',
'email_debug_level' => '0',
'onthefly-backup-key' => '<removed>'
'onthefly-restore-key' => '<removed>'
'ldap_user_dn_attribute' => 'distinguishedname',
'ldap_dn_additional_user_dn' => '',
'ldap_user_object_filter' => '(&(objectCategory=Person)(sAMAccountName=*))',
'ldap_bdn' => '',
'ldap_hosts' => '<removed>'
'ldap_password' => '<removed>'
'ldap_username' => '',
'duo_ikey' => '',
'disable_show_forgot_pwd_link' => '0',
'bck_script_passkey' => '<removed>'
'api_token_duration' => '60',
'enable_tasks_manager' => '0',
'task_maximum_run_time' => '300',
'maximum_number_of_items_to_treat' => '300',
'tasks_manager_refreshing_period' => '100',
'ldap_tls_certifacte_check' => 'LDAP_OPT_X_TLS_NEVER',

Updated from an older Teampass or fresh install:

Client configuration

Browser: -

Operating system: - bits

Logs

Web server error log

 -  ()

Teampass 10 last system errors

 * 01/10/2020 17:00:37 - Query: INSERT INTO `teampass_log_system` (`type`,`date`,`label`,`qui`,`field_1`) VALUES ('user_mngt', 1601546437, NULL, '1', '45')<br />Error: Column 'label' cannot be null<br />@ /sources/users.queries.php * 18/09/2019 13:56:25 - Query: INSERT INTO `teampass_log_system` (`type`,`date`,`label`,`qui`,`field_1`) VALUES ('user_mngt', 1568789785, NULL, '1', '31')<br />Error: Column 'label' cannot be null<br />@ /sources/users.queries.php * 21/06/2019 10:14:55 - <b>MySQL Query fail:</b> SELECT `title`, `id` FROM `teampass_nested_tree` WHERE `title` = TKK-VM-ST-CFO-EDC...;<br />You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '..' at line 1@/sources/items.queries.php * 20/06/2019 18:02:40 - <b>MySQL Query fail:</b> SELECT email,login FROM teampass_users WHERE id= undefined<br />Unknown column 'undefined' in 'where clause'@/sources/items.queries.php * 20/06/2019 18:02:40 - <b>MySQL Query fail:</b> SELECT label FROM teampass_items WHERE id= undefined<br />Unknown column 'undefined' in 'where clause'@/sources/items.queries.php * 27/03/2019 18:00:16 - <b>MySQL Query fail:</b> SELECT `title`, `id` FROM `teampass_nested_tree` WHERE `title` = Carbinet 3rd floo...;<br />You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '3rd floo...' at line 1@/sources/items.queries.php * 27/03/2019 17:58:56 - <b>MySQL Query fail:</b> SELECT `title`, `id` FROM `teampass_nested_tree` WHERE `title` = Carbinet 3rd floo...;<br />You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '3rd floo...' at line 1@/sources/items.queries.php * 27/03/2019 17:00:58 - <b>MySQL Query fail:</b> SELECT `title`, `id` FROM `teampass_nested_tree` WHERE `title` = Carbinet 3rd floo...;<br />You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '3rd floo...' at line 1@/sources/items.queries.php * 27/03/2019 16:59:10 - <b>MySQL Query fail:</b> SELECT `title`, `id` FROM `teampass_nested_tree` WHERE `title` = Carbinet 3rd floo...;<br />You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '3rd floo...' at line 1@/sources/items.queries.php * 17/01/2019 11:35:31 - <b>MySQL Query fail:</b> SELECT `title`, `id` FROM `teampass_nested_tree` WHERE `title` = HQ-VM-VDI-Fileser...;<br />You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '..' at line 1@/sources/items.queries.php

Log from the web-browser developer console (CTRL + SHIFT + i)

Insert the log here and especially the answer of the query that failed.

[Rank-Admin]

Here is the log from the web server. AH02430: Response header 'Content-disposition' value of 'attachment; filename="\bC.xlsx";' contains invalid characters, aborting request, referer: https://testsecret.smart.com.kh/index.php?page=items

[nilsteampassnet]

I cannot reproduce. Can you please share an example of attachment name?

[Rank-Admin]

It is the excel file that was uploaded to Teampass before upgrading to the latest version. It was able to download the attachment as normal before upgrading.