Topic: login goes back to login and not to index pg (Read 9270 times)

flyfastf22 · « **on:** April 19, 2006, 10:11:04 pm »

This is the 2nd time I have reloded the site and after a few days the login screen does not allow passage to the site.

After a successful login it forwards to the login screen not the index page

Does anyone have a solution or advice on what to do ?

flyfastf22
Copermine 1.4.2

I set it up for groups to login with their usernames and pass and it works fine for a few days and then...

http://www.icenetgroup.com/imgppj/

You can try with this
username: Centex
password: ice

It shows this URL and says "Welcome Centex..."
http://www.icenetgroup.com/imgppj/login.php?referer=index.php

But after it goes back to the login. It does not lock me out, just goes continually back to the login

It does this with my Admin logins and Group logins

Tranz · « **Reply #1 on:** April 19, 2006, 10:15:01 pm »

I was able to login. However, I got a message about the script not accepting cookies. If you have modified any of the files, like include/config.inc.php, make sure there is no whitespace after the ?> at the very end of the file.

You should also update to 1.4.4 due to security issues with prior versions.

xavierg · « **Reply #2 on:** April 20, 2006, 09:00:56 am »

Hi,

I have exactly the same problem.

It used to work properly and the only change was the language.

I check the file include/config.inc.php. out and it seems OK.

I see the connection to http://domainstat.net, so I think it is working properly.

I have the same message saying that my browser doesn't accept cookies script. But in fact it does.

So I cannot fix the problem.

Thanks for your help.

Xavier

Tranz · « **Reply #3 on:** April 20, 2006, 09:05:36 am »

I don't see what http://domainstat.net/ has to do with this. What is the URL to *your* site?

xavierg · « **Reply #4 on:** April 20, 2006, 09:19:12 am »

Quote from: TranzNDance on April 20, 2006, 09:05:36 am

I don't see what http://domainstat.net/ has to do with this. What is the URL to *your* site?

Because I see this link in the file.

The url:
http://www.bracopslambert.be/photos/

Login tempo
Pass temp

Xavier

Tranz · « **Reply #5 on:** April 20, 2006, 09:42:54 am »

Quote from: xavierg on April 20, 2006, 09:19:12 am

Because I see this link in the file.

The url:
http://www.bracopslambert.be/photos/

Login tempo
Pass temp

Xavier

That code was not added by Coppermine. It seems your webhost might have added it since I don't see it in the theme file. That might be the reason why cookies aren't working. If you added the code, you should remove it.

Joachim Müller · « **Reply #6 on:** April 20, 2006, 09:51:56 am »

budget or free webhosts often inject code to the page. If this isn't done properly (injection of code before headers are sent), authentification will break. If this is the case for you, find a better webhost.

xavierg · « **Reply #7 on:** April 20, 2006, 09:57:41 am »

Quote from: GauGau on April 20, 2006, 09:51:56 am

budget or free webhosts often inject code to the page. If this isn't done properly (injection of code before headers are sent), authentification will break. If this is the case for you, find a better webhost.

problem is that it is a paid hosting.

I will ask them whether they added this part.

Should it be possible that it is a hacking?

Xavier

Nibbler · « **Reply #8 on:** April 20, 2006, 06:02:42 pm »

Updating to 1.4.4 should fix it, be sure to replace the files as instructed in the update docs.

xavierg · « **Reply #9 on:** April 21, 2006, 07:49:46 am »

It is already 1.4.4.

What I don't understand is that when I modify the file include/config.inc.php, deleting the script with this b* url, the changes are not effective.

Is this file generated on fly from another file?

Xavier

Tranz · « **Reply #10 on:** April 21, 2006, 08:11:31 am »

I don't understand what you meant. Are you saying the url is in include/config.inc.php?

Have you asked your webhost if that's something they did? It's not something that is in Coppermine files.

xavierg · « **Reply #11 on:** April 21, 2006, 11:18:49 pm »

I try to explain (my English is very poor ,-))

1. I got problems with my site http://www.bracopslambert.be/photos/

2. As I searched in the forum for dimilar cases, I read that the file include/config.inc.php could be the reason of the problem.

3. When I checked this file out, I saw a script defining an URL in domainstat.

4. The solution seemed very simle to me... to simple in fact:
With ftp I modified this file include/config.inc.php, deleting the script. But this file is the only file I cannot modify. Even I save the modified file, the original comes back. As I am a newbee I wonder weither this file could be generated from elsewhere.

I will ask the question to my webprovider. But before to do that I wanted to be sure that the problem isn't coming from elsewhere.

Many thanks

Xavier

Nibbler · « **Reply #12 on:** April 21, 2006, 11:23:46 pm »

You may not have permissions to edit include/config.inc.php so you may have to ask your host to change permissions on it for you.

xavierg · « **Reply #13 on:** April 21, 2006, 11:32:24 pm »

Many thanks, I will do that

Xavier

xavierg · « **Reply #14 on:** April 21, 2006, 11:40:55 pm »

I did something else:
I deleted the file (I got a copy of it ;-))

And then I create a new one.

And it does work.

I will ask the question to my Hosting provider but I don't think he would have done this ;-)

Many thanks for your help
Xavier

Joachim Müller · « **Reply #15 on:** April 21, 2006, 11:46:43 pm »

issue solved then?

xavierg · « **Reply #16 on:** April 22, 2006, 03:19:18 am »

Quote from: GauGau on April 21, 2006, 11:46:43 pm

issue solved then?

Yes indeed.

Many thanks

Xavier

xavierg · « **Reply #17 on:** April 23, 2006, 12:41:37 pm »

Hi,

It is a security problem in smarty.

The fix is available on smarty.php.net

Hope it will help other guys

Xavier

scottycdl · « **Reply #18 on:** April 26, 2006, 04:34:37 pm »

I wish I could fix my CPG - I have the same problem and there does not seem to be a fix. Works one day, then not the next. I waste so much time messing with this 'Gallery' - I wonder if it is worth it. It seems to be in the shop more than it is on the road, and the stock answer seems to be RTFM, like we have time to wade through a gazillion pages on badly-written 'help' files.

Joachim Müller · « **Reply #19 on:** April 27, 2006, 08:08:43 am »

@xavierg: smarty is not part of coppermine, not sure what you mean.

@scottycdl: flame off please. Read the board rules sticky to get an idea how to post smart questions

News:

Author Topic: login goes back to login and not to index pg (Read 9270 times)

Nibbler

Nibbler