Can't login > Warning your browser does not accept script's cookies Can't login > Warning your browser does not accept script's cookies
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Can't login > Warning your browser does not accept script's cookies

Started by MrQwest, August 15, 2006, 04:15:16 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

MrQwest

Hi there...

I set up a coppermine gallery installation on a friends website.  It's only used to upload images for  her news page.  She recently contacted me saying she couldn't log in. 

After having a look, her login page says Warning your browser does not accept script's cookies along the top of the login boxes.  When you enter the login details and press "login", it goes through and says "welcome xxx" (where xxx is the username) and then reloads the page back to the coppermine index, however, it shows as not logged in.  There's no admin links, or upload links etc.

After searching through the forum, i can see similar error messages for previous versions of cpg, but not for 1.4.. So i hope someone can help me out here!

Any idea why we cant log in OR upload images?

Thank you in advance!

Nibbler

Post a link. Try logging in from a different pc, different browser, disabling 'security' software etc.

MrQwest

Hello there nibbler..

The link is http://emmafeline.com/gallery

And i have tried logging in from a PC AND a mac, running different browsers & different security software...

Nibbler

You should update the gallery and add your javascript to template.html only. Dumping it into a php file is asking for trouble.

Sami

‍I don't answer to PM with support question
Please post your issue to related board

MrQwest

Ok, im lost here...

I can update the gallery, which i shall try later, but what javascript should be added to template.html?

As far as i was aware, this was a clean install of Coppermine and i cant remember adding anything to it?!

And bmossavari, what am i adding after the title tag?

Joachim Müller

The offending JavaScript at the top of the output<script language="javascript" type="text/javascript">
<!--
var win=null;
function NewWindow(mypage,myname,w,h,scroll,pos){
if(pos=="random"){LeftPosition=(screen.width)?Math.floor(Math.random()*(screen.width-w)):100;TopPosition=(screen.height)?Math.floor(Math.random()*((screen.height-h)-75)):100;}
if(pos=="center"){LeftPosition=(screen.width)?(screen.width-w)/2:100;TopPosition=(screen.height)?(screen.height-h)/2:100;}
else if((pos!="center" && pos!="random") || pos==null){LeftPosition=0;TopPosition=20}
settings='width='+w+',height='+h+',top='+TopPosition+',left='+LeftPosition+',scrollbars='+scroll+',location=no,directories=no,status=yes,menubar=no,toolbar=no,resizable=no';
win=window.open(mypage,myname,settings);}
// -->
</script>
appears to be injected by the webhost, as it doesn't reside in http://emmafeline.aspectsdigital.com/gallery/themes/classic/template.html
I suggest talking to your webhost. If they actually are to blame for that script, ask them to either stop injecting their code in the silly, non-standards compliant way they do now. If they refuse, find a better webhost.
To me it semms that the JavaScript bit that I refered to above is being injected before page headers are actually being sent, therefor rendering cookies non-functional.

MrQwest

GauGau, thank's for that!... Any ideas what that javascript code does though?.. And also, if it does reside in any of the files on my server, what file would it be in?.. i had a look in index.php, and also in theme.php & template.html within the themes folder, but couldn't see it..

Any ideas?

Sami

GauGau said:
Quoteappears to be injected by the webhost, as it doesn't reside in http://emmafeline.aspectsdigital.com/gallery/themes/classic/template.html
I suggest talking to your webhost. If they actually are to blame for that script, ask them to either stop injecting their code in the silly, non-standards compliant way they do now. If they refuse, find a better webhost.

You need to ask your webhost then
‍I don't answer to PM with support question
Please post your issue to related board

Ardath Rekha

I'm actually having the same problem, but I don't see any sign of a javascript injection when I view-source my pages.  (I'm doing a test-build and redesign of my galleries with this one, and the whole thing's come to a screeching halt over this).

The gallery's at http://www.ardath-rekha.com/links/ and is actually going to be for a different site, once I get everything working.  But suddenly I can't log in to upload the images I need in there.  Which is... really bad.  Can you see anything in the code that would be activating this?

Edit: As an aside, another gallery I have on the same webspace ( http://www.ardath-rekha.com/images/ ) which is out-of-date and which I was planning to upgrade next, still works just fine.

Son of Edit:  And there's absolutely nothing wrong with http://www.ardath-rekha.com/dsb/ -- which is also a 1.4.8 build.  WEIRD.

Sami

you have set wrong cookie path ( /rgfclinks/ ) it should be /
‍I don't answer to PM with support question
Please post your issue to related board

Joachim Müller

Quote from: Ardath Rekha on August 19, 2006, 01:23:15 AM
I'm actually having the same problem,
No, your issue differs. You shouldn't have replied to this thread. Don't edit your posting, but reply to it. Do as bmossavari suggested.

Ardath Rekha

Thank you.  That fixed things.  Sorry for posting in the wrong place.