mariovaldez.net

I installed the security fix for PHProjekt posted on the PHProjekt website on the 28th of December. Ever since I am required to login in again when accessing the CM module for the first time in a browser session.

Is there a patch available for this? I'm suspecting that I'm not the only one getting this error.

joel:

> I installed the security fix for PHProjekt posted
> on the PHProjekt website on the 28th of December.
> Ever since I am required to login in again when
> accessing the CM module for the first time in a
> browser session.

I'll check it out. I'll post an answer soon.


Regards,

Mario A. Valdez-Ramirez.

Joel:

By the way, does this happen with a fresh new install of Phprojekt? I have a report from another user but only happening with some themes.


Regards,

Mario A. Valdez-Ramírez.

No themes are used.

The only plugin is the CMS module.

Another user with a security patch problem, I directed them to this thread but have not seen them post. So here is the original from the PHProjekt forum:
http://www.phprojekt.com/modules.php?op ... rd=&field=

Mark:

> Another user with a security patch problem,
> I directed them to this thread but have not
> seen them post. So here is the original from
> the PHProjekt forum:

Hi. Thanks for the reference, Mark.

He contacted me by email a couple days ago. I expect to have a solution this weekend.


Regards,

Mario A. Valdez-Ramirez.

I have the same problem
Any news about solution?

Bob, Joel:

I have been having problems replicating this problem, but finally now I can. But I can only replicate this problem with a given browser under a specific condition. So, my question to anyone having this problem:

What browser are you using (please include the version number)?

Regards,

Mario A. Valdez-Ramirez.

Bob, Joel:

Sorry, I forgot to ask,
Version of PHP, web server (Apache, IIS, etc), and server operative system.

Thanks,

Mario A. Valdez-Ramirez.

Bob, Joel:

Please contact me by email (mario@mariovaldez.org), I've been unable to replicate this problem, but I have made a patched version that may fix it.


Regards,

Mario A. Valdez-Ramirez.

Hi Mario,

Just poking to see if this issue has been resolved or if an 'offical' patch is still in the works. I am having the same problem using the newest versions of both FireFox and IE.

Server is FreeBSD running Apache and PHP ver 4.3.8.

Thanks,

Nick
zonksz at hotmail dot com

PS - Your code rocks -- it's exactly what I have been looking for and is a cinch to install!

I have the same problem
may be reversing back to previous phpproject version is only option?
any news about it?

To anybody having the double-login problem (you login in Phprojekt and when selecting the CMS tab you are asked again to login, OR when you logout from an user and login again the CMS thinks you are still logged as the first user), read on.


If you are using Apache and PHP is running as a SAPI module, you can use a .htaccess file to enable the PHP option session.auto_start. It seems that when session.auto_start is disabled, the Phprojekt and CMS module session become dissociated (each start using a different session).

The .htaccess should contain:


Test and tell, please. Also, note that this is a workaround, not the final solution.

Regards,

Mario A. Valdez-Ramirez.

To anybody having the double-login problem, you can now download a patched version of the CMS module (0.6.1) from http://www.mariovaldez.net/software/cm_4p/download.php. This version 0.6.1 only addresses this bug and another minor one.

Please let me know if it works correctly in your installation.


Regards,

Mario A. Valdez-Ramirez.

Hi Mario,

Upgraded to 0.6.1 and problem solved on my end. Thanks!

Nick
zonksz at hotmail dot com

Zonks:

> Upgraded to 0.6.1 and problem
> solved on my end.

Great! I've received other sucess reports by email. So I think this problem ha been solved.


Regards,

Mario A. Valdez-Ramirez.