1
Discussion & Troubleshooting / Re: Login issue
« on: August 25, 2010, 11:48:20 AM »
Thank you so much... everything works and nothing was lost your amazing.
Check the new Tutorial subforum with helpfull guides and tutorials for modifications and tweaks.
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Can you create a ftp account for me to your site and setup a test 4images gallery so I can do some testings on it?
PM me with the info if you up to it
First you need to find what causing this. Search in all files for keyword "delete" (no quotes), if you find anything related to cookies, it could be it.
Did you do any modifications in the code?
For some reason your site returns two sets of cookies when you try to login:Code: [Select]Set-Cookie: 4images_lastvisit=1282185938; expires=Fri, 19-Aug-2011 02:49:28 GMT
Note the line with 4images_userpass that is exactly what your server returns, I didn't alter that. That is not something 4images does, it look like you've changed something in the code.
Set-Cookie: 4images_userid=-1; expires=Fri, 19-Aug-2011 02:49:28 GMT
Set-Cookie: 4images_userpass=deleted; expires=Wed, 19-Aug-2009 02:49:27 GMT
Set-Cookie: 4images_lastvisit=1282186157; expires=Fri, 19-Aug-2011 02:49:28 GMT
Set-Cookie: 4images_userid=1; expires=Fri, 19-Aug-2011 02:49:28 GMT
When you login at normal login page (not ACP) and selected "Log me on automatically next visit?", then you stay logged in fine, and that is the cookies server returns:Code: [Select]Set-Cookie: 4images_lastvisit=1282184897; expires=Fri, 19-Aug-2011 02:45:38 GMT
Again, it returns two sets...
Set-Cookie: 4images_userid=-1; expires=Fri, 19-Aug-2011 02:45:38 GMT
Set-Cookie: 4images_userpass=21232f**************801fc3; expires=Fri, 19-Aug-2011 02:45:38 GMT
Set-Cookie: 4images_lastvisit=1282185604; expires=Fri, 19-Aug-2011 02:45:38 GMT
Set-Cookie: 4images_userid=1; expires=Fri, 19-Aug-2011 02:45:38 GMT
um...if that is exactly what you did, then no, it is not correct...you've put password into username and username into password
P.S. for your protection I've altered password in your post.
just to be sure, what exactly did you do to reset the password?
did you do as suggested in FAQ -> Lost admin password - what to do? ?
You're running an outdated version 1.7.1 (from 03/2005), which had some security issues.
1.7.6 is the current version:
http://www.4homepages.de/4images/download.php
Please also have a look at the security tips:
http://www.4homepages.de/forum/index.php?topic=14982.0
hi,Quoteafter doing all that nothing has changed. anybody have any ideas.
if you did the changes and uploaded changed files it must work..
except your ftp client didn't overwrite the old files on the server..
check that
Ok, please test this (if it all works, I'll post it as a compability fix):
Please note, in each file is possible more then one instance of searched line, that means all of the found lines must be changed as instructed!
In index.php, categories.php, details.php, postcards.php, search.php, top.php, includes/functions.php (two times) find:Code: [Select]FROM ".IMAGES_TABLE." i, ".CATEGORIES_TABLE." c
Replace with:Code: [Select]FROM (".IMAGES_TABLE." i, ".CATEGORIES_TABLE." c)
In member.php, admin/comments.php find:Code: [Select]FROM ".COMMENTS_TABLE." c, ".IMAGES_TABLE." i
Replace with:Code: [Select]FROM (".COMMENTS_TABLE." c, ".IMAGES_TABLE." i)
Stop here. Test every page and only if you have problem continue next:
In postcards.php find:Code: [Select]FROM ".POSTCARDS_TABLE." p, ".IMAGES_TABLE." i
Replace with:Code: [Select]FROM (".POSTCARDS_TABLE." p, ".IMAGES_TABLE." i)
In search.php find:Code: [Select]FROM ".WORDLIST_TABLE." w, ".WORDMATCH_TABLE." m
Replace with:Code: [Select]FROM (".WORDLIST_TABLE." w, ".WORDMATCH_TABLE." m)
In includes/auth.php find:Code: [Select]FROM ".GROUP_ACCESS_TABLE." a, ".GROUP_MATCH_TABLE." m
Replace with:Code: [Select]FROM (".GROUP_ACCESS_TABLE." a, ".GROUP_MATCH_TABLE." m)
In admin/home.php find:Code: [Select]FROM ".USERS_TABLE." u, ".SESSIONS_TABLE." s
Replace with:Code: [Select]FROM (".USERS_TABLE." u, ".SESSIONS_TABLE." s)
In admin/usergroups.php find:Code: [Select]FROM ".GROUPS_TABLE." g, ".GROUP_MATCH_TABLE." gm
Replace with:Code: [Select]FROM (".GROUPS_TABLE." g, ".GROUP_MATCH_TABLE." gm)