PDA

View Full Version : can't login to admin page


rcjay2
05-14-2007, 01:08 AM
All,

I can't login at all. I have tried to look at the knowledge base and have had no luck. I have enabled cookies, running 1.5, and tried running "UPDATE pixelpost_config SET `password`=MD5('*****')" through the MySQL query browser.

I try to login with the username and password and the page blinks and comes back.

www.jeezopeezo.com

ANy help would be great.

Thanks
Rob

Dkozikowski
05-14-2007, 04:08 AM
What you have done should have worked but have you tried using the forgot password form or you can try to download this addon (http://pixelpost.org/v1/index.php?x=downloads&details=150) and give this a try.

If all of these methods do not work than it could be a sessions.

Please report back with your progress.

rcjay2
05-14-2007, 11:05 AM
dwilkinsjr,

I have tried the forgot password form and the password_recovery.php. All have failed. The funny thing is that I can query the pixelpost_config db and see the value for the password hash change when I run the password_recovery.php.

What is the sessions thing you speak of.

Thanks
Rob

rcjay2
05-14-2007, 11:35 AM
dwilkinsjr,

I have tried the forgot password form and the password_recovery.php. All have failed. The funny thing is that I can query the pixelpost_config db and see the value for the password hash change when I run the password_recovery.php.

What is the sessions thing you speak of.

Thanks
Rob

Update....I am able to login now. I have to check "Login me in automatically" for it to work.

THanks for all the help.
Rob

dcsurfer
03-19-2008, 03:59 PM
I was unable to login after the initial install as well, however, once I checked the "Automatically log me in" box I had no problem. This should be listed as a bug and corrected because it is a potential security issue. PixelPost V1.7.1

Dennis
03-19-2008, 07:07 PM
Well probably you know more about this then we do. So please explain why this is a security issue?

Dkozikowski
03-19-2008, 07:15 PM
dcsrufer, login to your admin panel and goto the general info page.

What does it say next to your Session save path

jeremyrh
03-31-2008, 08:13 AM
Well probably you know more about this then we do. So please explain why this is a security issue?

Presumably because he may want to adminster his blog from an unsecure computer, and not want other users to automatically be logged in to his admin page?

Dennis
03-31-2008, 11:00 AM
I was being sarcastic on that remark. If you use this option and press logout afterwards then is ok.

If you forget to logout you might have a problem. But this is not a problem of the software but a user problem. So there is no security issue in Pixelpost.

jeremyrh
03-31-2008, 04:35 PM
I see. I guess I was confused into thinking that checking the box that says "log me in automatically each visit" would .. err .. log me in automatically. My bad.

Dkozikowski
03-31-2008, 04:52 PM
Users who run into the problem of having to check the auto-login checkbox most likely have a sessions issue.

There could be a few reasons why their sessions are not working.

Most likely though, the sessions are improperly setup on the server or the user must specify the sessions save path (http://us2.php.net/session_save_path) specifically within the code.

You can try this out in Pixelpost v1.7.1 by opening admin/index.php and placing the following code on line 55 (or right before session_start(); if you don't know the line number).

session_save_path('/path/to/sessions/folder/');

If you do not know the /path/to/sessions/folder/ you can ask your host or search their knowledge base for the answer.

jimdugan
06-21-2008, 08:21 PM
Maybe it's just me. Or maybe it's the lousy hosting company I'm dealing with.

But this sessions problem comes up often. And without any logic. Pixelpost will be running fine then all of a sudden, it becomes impossible to login.

And it happens rarely enough that I forget the solution and have to search through the forum to find this little bit of code to insert on line 55 to fix it.

My suggestion is: this should be put more prominently, maybe in an FAQ document or as a sticky at the top of the forum.

Also: is there something in a phpinfo page that will tell us when a server needs this added information?

Thanks!
Jim