cannot login

[nickmarlow1]

Hi,

Thanks for you help so far Xander. I have finally got the new version 1.4.0 to work, i think my problem was due to both file and mysql permission errors.

however, i am still having difficulties. on my website, i cannot get the logon feature to work. with $cfg['protect'] set to false, i can access the admin section fine, but if i set it to true, i cant log in, it asks for the username and password, i put it in (as specified in config.inc.php) and then it asks me for them again. i have tried differnet passwords, and i have checked obvious things like caps lock.

do you have any ideas?

thanks
Nick

[youcantryreachingme]

I had this issue with one site where Melbourne IT was the webhost. I moved the site to another webhost that uses CPanel on Linux/Apache and there was no further issue.

Despite chasing Melbourne IT's support department for over a week I never got any meaningful help with debugging the problem. I suspected it was the way in which their hosting package handled the particular request protocol which prompts you for your password.

The same code also worked on my local PC running Windows/Apache

[nickmarlow1]

thanks for the info. i have it hosted with a reseller account with an american mob called blurstorm, i have a few websites on it and am really happy with them, so i dont want to change.

do you think it would be worthwhile seeing if they know what is causing it?

[youcantryreachingme]

I'd wait on Xander first.

The webhost is likely to say it comes down to your program code, which they don't support.

However, there is something else you can do. Put a file on your webhost called, say, 'info.php'. Inside the file, put:

Code: [Select]

<?php

phpinfo();

?>
Now call the file in a web browser. Near the top of the results you'll see a field called "Server API". Let us know what the value is. On my machine now it's "Apache 2.0 Handler".

Chris.

[nickmarlow1]

Thanks Chris,

The value of it is CGI.

Is this a problem?

the address of this file is http://eastloddonanddistricthistoricalsociety.com.au/info.php (yes i know the domain is ridiculously long, but its what they wanted)

Thanks for your help
Nick

[abicio]

Thanks Chris,

The value of it is CGI.

Is this a problem?

Yes: http://community.compactcms.nl/forum/index.php/topic,79.0.html

[youcantryreachingme]

And from here: http://php.net/manual/en/features.http-auth.php

The HTTP Authentication hooks in PHP are only available when it is running as an Apache module and is hence not available in the CGI version.

[nickmarlow1]

thanks, iv got it working using htaccess

[nickmarlow1]

I have now experienced another issue, which doesnt exist in ie8 , but does in firefox and chrome.

with (and only with) the htaccess enabled, whenever i try to upload a file, using the file upload functionality available when creating a link, the browser pops up another login box, asking for your username and passwd. so i put them in, and it trys for a while, and the browser seems to freeze after that. The file doesnt get uploaded.

However, it works as expected on ie8. disabling the .htaccess protection makes it act as expected as well, but obviosly that cannot be a solution due to security issues.

If anyone can help, it would be very much appreciated.

Thanks
Nick.

[youcantryreachingme]

This won't help you Nick, but Xander - another solution is to move authentication into the database 

Chris.

[nickmarlow1]

on this page, http://compactcms.nl/todo.html it says "Fix bug at image upload (double authentication)"

does anyone know if this is related to my problem?

[Xander]

Hi Nick,

It is actually based on yours - and some others - reporting issues with the current way of "doing" security. The current method is the safest in its kind, when wanting security that only requires browser support. I have found however that too many server environments do not support this method. That is why I have been suggesting to disable CompactCMS security and have been redirecting users to here. You can make a privately protect your /admin environment without CompactCMS interfering. This should fix bugs while I work on a new (database) user management system.

Cheers,
Xander.