login/logout, no user view, no config... login/logout, no user view, no config...
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

login/logout, no user view, no config...

Started by iroc42, September 29, 2005, 09:12:37 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

iroc42

ok well it started up again.

www.msjerilee.com/cpg --> the gallery
www.msjerilee.com/forum --> the phpbb forums

username: tester
password: test


this is what happens, after clearing out my cookies, i go to the coppermine gallery page. i login, and it returns me back to the gallery page. but it still states [LOGIN] implying im not logged in. when i click on LOGIN it tells me that my username is already logged in. then i click on the config button, it says i don't have permission to view this page. when that happens it has the appearance that i have logged out again, the LOGIN button appears. i click it and it says: You are already logged in! cant go between user mode and admin neither.

Nibbler

This could be caused by you using your site without the www prefix. Your forum is setting cookies on www.msjerilee.com - if you can adjust your forum's cookie domain to .msjerilee.com that may resolve your issue.

iroc42

#2
i understand, but then again i dont quite.

for my forums my cookie settings re as follows

cookie domain: *blank*
cookie name: phpbb2mysql
cookie path: /

what is it that im supposed to change to test your theory out?

im an idiot.. i reread ur post.. cookie domain.. check..

iroc42

#3
tried it. exactly like this...


.msjerilee.com     <-- domain cookie setting in the config of phpbb.. still no good.



i tested your theory tho. i go to my gallery using http://msjerilee.com/cpg and it works perfectly.

^ eh nvm the above statement. when i try and upload it says i dont have sufficient permissions and then it goes back to the [LOGIN] button.

so what steps do i need to take to solve this problem?

iroc42

this is what ive observed.. i can go into the config panel only when i go to http://msjerilee.com/cpg, but i cant upload cause it'll tell me i dont have privilages.
then i go into http://www.msjerilee.com/cpg, and i cannot go into the config panel, but i can upload (sometimes).

seemss really inconsistant. its really starting to get on my nerves cause i had no issue up until recently and there is no reason why.

Stramm

have you tried to clear your cookie? I've just logged in as tester using www in the domain and without, logged out, switched etc. and all seems to work smooth... the upload page comes up without problems.

iroc42

yeah cleared cookies and switched between IE and Firefox. might try the rebooting method. cause we all know how that mysteriously fixes things.

Joachim Müller

Suggested fix: make both your forum and your gallery use the domain name without the www. To do so, you need to create an .htaccess file and put it into your web root (if your webhsot allows you to do this). This should be the content of the .htaccess file:RewriteEngine on
RewriteCond %{HTTP_HOST} ^www\.msjerilee\.com$ [NC]
RewriteRule ^(.*) http://msjerilee.com/$1 [R,L]
If you already have an .htaccess file there, you'll have of course to add the suggested code instead of creating a new file.

iroc42

#8
so i just put that code in a txt document, rename it to .htaccess and place it in the main directory?

sorry for the n00b question, ive been doing webpages for a while and never had to come across this kinda fix. not doubting your fix, just you learn something new everyday.

edit: i googled it, i think i got the idea. thanks for the suggestion, ima try it asap.

Joachim Müller

yes, .htaccess files are plain text files that are being used in the Lunix/Apache world, so it might work for you, unless your webhost doesn't allow the rewrite engine. It won't hurt to try - if it fails, nothing will happen at all, and you can savely remove the .htaccess file again or replace it with an empty one.
You can do many cool things with this method like hotlink protection, redirection of error pages etc.. Take a look at these pages:
http://httpd.apache.org/docs/1.3/howto/htaccess.html (more advanced stuff: http://httpd.apache.org/docs/1.3/mod/mod_rewrite.html)
http://www.yourhtmlsource.com/sitemanagement/urlrewriting.html
http://www.vnwr.com/resources/tutorials/htaccess.html
There are a lot more pages that explain this much better than I could, just google for htaccess rewrite tutorial or similar.