login goes back to login and not to index pg

[flyfastf22]

This is the 2nd time I have reloded the site and after a few days the login screen does not allow passage to the site.

After a successful login it forwards to the login screen not the index page

Does anyone have a solution or advice on what to do ?

flyfastf22
Copermine 1.4.2

I set it up for groups to login with their usernames and pass and it works fine for a few days and then...
http://www.icenetgroup.com/imgppj/

You can try with this
username:  Centex
password:   ice

It shows this URL and says "Welcome Centex..."
http://www.icenetgroup.com/imgppj/login.php?referer=index.php

But after it goes back to the login. It does not lock me out, just goes continually back to the login

It does this with my Admin logins and Group logins

[Tranz]

I was able to login. However, I got a message about the script not accepting cookies. If you have modified any of the files, like include/config.inc.php, make sure there is no whitespace after the ?> at the very end of the file.

You should also update to 1.4.4 due to security issues with prior versions.

[xavierg]

Hi,

I have exactly the same problem.

It used to work properly and the only change was the language.

I check the file include/config.inc.php. out and it seems OK.

I see the connection to http://domainstat.net, so I think it is working properly.

I have the same message saying that my browser doesn't accept cookies script. But in fact it does.

So I cannot fix the problem.



Thanks for your help.

Xavier

[Tranz]

I don't see what http://domainstat.net/ has to do with this. What is the URL to *your* site?

[xavierg]

I don't see what http://domainstat.net/ has to do with this. What is the URL to *your* site?

Because I see this link in the file.

The url:
http://www.bracopslambert.be/photos/

Login   tempo
Pass    temp


Xavier

[Tranz]

Because I see this link in the file.

The url:
http://www.bracopslambert.be/photos/

Login   tempo
Pass    temp


Xavier

That code was not added by Coppermine. It seems your webhost might have added it since I don't see it in the theme file. That might be the reason why cookies aren't working. If you added the code, you should remove it.

[Joachim Müller]

budget or free webhosts often inject code to the page. If this isn't done properly (injection of code before headers are sent), authentification will break. If this is the case for you, find a better webhost.

[xavierg]

budget or free webhosts often inject code to the page. If this isn't done properly (injection of code before headers are sent), authentification will break. If this is the case for you, find a better webhost.

problem is that it is a paid hosting.

I will ask them whether they added this part.

Should it be possible that it is a hacking?

Xavier

[Nibbler]

Updating to 1.4.4 should fix it, be sure to replace the files as instructed in the update docs.

[xavierg]

It is already 1.4.4.

What I don't understand is that when I modify the file include/config.inc.php, deleting the script with this b* url, the changes are not effective.

Is this file generated on fly from another file?


Xavier

[Tranz]

I don't understand what you meant. Are you saying the url is in include/config.inc.php?

Have you asked your webhost if that's something they did? It's not something that is in Coppermine files.

[xavierg]

I try to explain (my English is very poor ,-))

1. I got problems with my site  http://www.bracopslambert.be/photos/

2. As I searched in the forum for dimilar cases, I read that the file include/config.inc.php could be the reason of the problem.

3. When I checked this file out, I saw a script defining an URL in domainstat.

4. The solution seemed very simle to me... to simple in fact:
      With ftp I modified this file include/config.inc.php, deleting the script. But this file is the only file I cannot modify. Even I save the modified file, the original comes back. As I am a newbee I wonder weither this file could be generated from elsewhere.

I will ask the question to my webprovider. But before to do that I wanted to be sure that the problem isn't coming from elsewhere.

Many thanks

Xavier

[Nibbler]

You may not have permissions to edit include/config.inc.php so you may have to ask your host to change permissions on it for you.

[xavierg]

Many thanks, I will do that


Xavier

[xavierg]

I did something else:
I deleted the file (I got a copy of it ;-))

And then I create a new one.

And it does work.

I will ask the question to my Hosting provider but I don't think he would have done this ;-)

Many thanks for your help
Xavier

[Joachim Müller]

issue solved then?

[xavierg]

issue solved then?

Yes indeed.

Many thanks

Xavier

[xavierg]

Hi,

It is a security problem in smarty.

The fix is available on smarty.php.net

Hope it will help other guys


Xavier

[scottycdl]

I wish I could fix my CPG - I have the same problem and there does not seem to be a fix. Works one day, then not the next. I waste so much time messing with this 'Gallery' - I wonder if it is worth it. It seems to be in the shop more than it is on the road, and the stock answer seems to be RTFM, like we have time to wade through a gazillion pages on badly-written 'help' files.

[Joachim Müller]

@xavierg: smarty is not part of coppermine, not sure what you mean.

@scottycdl: flame off please. Read the board rules sticky to get an idea how to post smart questions