Advanced search  

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Pages: [1]   Go Down

Author Topic: SMF 2.0 Beta 4 -> cpg 1.4.19 bridging problem  (Read 4363 times)

0 Members and 1 Guest are viewing this topic.

DoW Kid Rock

  • Coppermine newbie
  • Offline Offline
  • Posts: 16
SMF 2.0 Beta 4 -> cpg 1.4.19 bridging problem
« on: November 25, 2008, 09:02:44 pm »
ok so I decided to do a fresh install (weird as i originally installed 1.4.19...must have been the hack I added)
still having the problem that users are not able to keep their log in when they click on the coppermine link in my forum

here are the details

Forum URL:      http://realitycheck.freeate.com/
cpg url: http://realitycheck.freeate.com/gallery

test user: cpgtest / test pass: cpgtest

smf version: 2.0 beta 4
cpg version 1.4.18

bridge settings.

Forum URL:      http://realitycheck.freeate.com/
BBS-configfile:    /home/wckr/domains/realitycheck.freeate.com/public_html
use post count groups?:    2

sorry I forgot to check the configuration when I re installed...now I can't get back in again(have tried original coppermine username and pass, but doesn't let me in...even tried forum admin)

I have made sure that there aren't any local cookies being stored in my forum
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de
Re: SMF 2.0 Beta 4 -> cpg 1.4.19 bridging problem
« Reply #1 on: November 26, 2008, 07:12:05 am »
Two issues:
  • Review your use of the www subdomain: cookie authentification is based on domains. Subdomains are different domains. For details, read up the corresponding section of the preliminary docs for cpg1.5.x - the advice posted there applies for cpg1.4.x as well.
    Your forum sets the cookie host as .realitycheck.freeate.com Your gallery sets the cookie for realitycheck.freeate.com. Mind the difference (leading dot)
  • Your webhost appears to inject ads into the coppermine pages - if this happens before the header information is being sent, cookies can not be read and won't work. Take a look at the output of your coppermine-driven pages: a lot of crap before the doctype-declaration (<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">).
« Last Edit: November 26, 2008, 05:00:24 pm by Joachim Müller »
Logged

DoW Kid Rock

  • Coppermine newbie
  • Offline Offline
  • Posts: 16
Re: SMF 2.0 Beta 4 -> cpg 1.4.19 bridging problem
« Reply #2 on: November 26, 2008, 08:49:26 am »
ok so I can deal with changing the first problem...the cookies

as for the second it unfortunately is a condition of my hosting. can't afford hosting at the moment without adverts.  if I am reading this correctly it would be better not to try to do the bridging until I can get hosting without the extensive adverts at the top?

thank you
Logged

Joachim Müller

  • Dev Team member
  • Coppermine addict
  • ****
  • Offline Offline
  • Gender: Male
  • Posts: 47843
  • aka "GauGau"
    • gaugau.de
Re: SMF 2.0 Beta 4 -> cpg 1.4.19 bridging problem
« Reply #3 on: November 26, 2008, 05:04:39 pm »
The injection doesn't necessarilly mean that bridging won't work. It will only interfere if cookie handling is not working as expected. Try fixing the first issue and then see if the second one is a show-stopper. However, I'd look for another webhost - they certainly don't qualify as appropriate webhosts if they don't even know how to inject ads properly. Injecting code before the doctype declaration is just a sign of not having a clue about how websites work. It's OK for a "regular" site owner not to know those details to a certain extent, but it's definitely a neede skill for webhosts - even for free ones.
Quote from: DoW Kid Rock on November 26, 2008, 08:49:26 am
as for the second it unfortunately is a condition of my hosting. can't afford hosting at the moment without adverts.
What do you mean by that? Budget webhosting without ads is cheap - less then $50 a year afaik.
Logged

DoW Kid Rock

  • Coppermine newbie
  • Offline Offline
  • Posts: 16
Re: SMF 2.0 Beta 4 -> cpg 1.4.19 bridging problem
« Reply #4 on: November 26, 2008, 06:04:12 pm »
ok will work on it today.

as for the last part.....I have been out of work due to being really ill for over 2 months (part of the reason I am doing this site as I am really bored) and my partner is just about to have a baby.....= no cash at all.  when it is better I will move it to someplace better, but for 5Gb of storage and a really good uptime I will just have to suffer for now

thanks though
Logged
Pages: [1]   Go Up
« previous next »
 

Page created in 0.019 seconds with 19 queries.