Set admin cookie Set admin cookie
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Set admin cookie

Started by sowalsky, June 03, 2005, 02:33:11 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Print
Go Down Pages1
User actions

sowalsky

June 03, 2005, 02:33:11 PM Last Edit: June 05, 2005, 11:56:16 PM by GauGau
Hi,
I want to somehow trigger the setting of a cookie with my admin username and password when I access a certain page (outside of coppermine) so that when I view cpg, it gives me admin access.  This is so I don't have to log in manually; I can use my private portal page to set the cookie.

How do I do this?  I can't find where $config[cookie_name] or $config[cookie_path] are defined, so I can't place the proper cookie.  Help, please!?

Nibbler

#1
June 03, 2005, 08:03:47 PM
Here's the setcookie commands from login.php

Code Select
setcookie($CONFIG['cookie_name'] . '_uid', $USER_DATA['user_id'], time() + $cookie_life_time, $CONFIG['cookie_path']);
        setcookie($CONFIG['cookie_name'] . '_pass', md5($HTTP_POST_VARS['password']), time() + $cookie_life_time, $CONFIG['cookie_path']);


Hardcode in your details and it should work. Cookie name and path are those set in config, loaded into the $CONFIG array from your database in init.inc.php

sowalsky

#2
June 04, 2005, 03:20:08 PM
Okay, so found cookie_name -- it's cpg133 and cookie_path is /
So would my syntax be:

setcookie('cpg133_uid', '1', time() + 3600, '/');
setcookie('cpg133_pass', md5('mypass'), time() + 3600, '/');

I'm trying this and the cookie isn't taking.  It doesn't even show up in the FireFox cookie list... ('1' is the value of the uid cookie for admin placed when i logged in normally.
thanks for your help.

sowalsky

#3
June 05, 2005, 01:19:23 AM
Nevermind -- I figured out what was wrong. I was putting it after my <HTML> tag.  Oops.
Print
Go Up Pages1
User actions