mariovaldez.net
http://www.mariovaldez.net/webapps/forums/

Additional login reguired after security patch
http://www.mariovaldez.net/webapps/forums/viewtopic.php?f=3&t=187
Page 1 of 1

Author:  joel björk [ 07 Feb 2005, 00:24 ]
Post subject:  Additional login reguired after security patch

I installed the security fix for PHProjekt posted on the PHProjekt website on the 28th of December. Ever since I am required to login in again when accessing the CM module for the first time in a browser session.

Is there a patch available for this? I'm suspecting that I'm not the only one getting this error.

Author:  mvaldez [ 07 Feb 2005, 05:32 ]
Post subject:  I'll check it out.

joel:

> I installed the security fix for PHProjekt posted
> on the PHProjekt website on the 28th of December.
> Ever since I am required to login in again when
> accessing the CM module for the first time in a
> browser session.

I'll check it out. I'll post an answer soon.


Regards,

Mario A. Valdez-Ramirez.

Author:  mvaldez [ 07 Feb 2005, 05:55 ]
Post subject:  Themes...

Joel:

By the way, does this happen with a fresh new install of Phprojekt? I have a report from another user but only happening with some themes.


Regards,

Mario A. Valdez-Ramírez.

Author:  joel björk [ 07 Feb 2005, 07:15 ]
Post subject: 

No themes are used.

The only plugin is the CMS module.

Author:  Mark Coudriet [ 24 Feb 2005, 07:27 ]
Post subject:  FYI

Another user with a security patch problem, I directed them to this thread but have not seen them post. So here is the original from the PHProjekt forum:
http://www.phprojekt.com/modules.php?op ... rd=&field=

Author:  mvaldez [ 25 Feb 2005, 20:20 ]
Post subject:  Acknowledged !

Mark:

> Another user with a security patch problem,
> I directed them to this thread but have not
> seen them post. So here is the original from
> the PHProjekt forum:

Hi. Thanks for the reference, Mark. :)

He contacted me by email a couple days ago. I expect to have a solution this weekend.


Regards,

Mario A. Valdez-Ramirez.

Author:  bob [ 14 Mar 2005, 13:14 ]
Post subject:  Re: Acknowledged !

mvaldez wrote:
Mark:

> Another user with a security patch problem,
> I directed them to this thread but have not
> seen them post. So here is the original from
> the PHProjekt forum:

Hi. Thanks for the reference, Mark. :)

He contacted me by email a couple days ago. I expect to have a solution this weekend.


Regards,

Mario A. Valdez-Ramirez.



I have the same problem
Any news about solution?

Author:  mvaldez [ 19 Mar 2005, 04:50 ]
Post subject:  Following the clues...

Bob, Joel:

I have been having problems replicating this problem, but finally now I can. But I can only replicate this problem with a given browser under a specific condition. So, my question to anyone having this problem:

What browser are you using (please include the version number)?

Regards,

Mario A. Valdez-Ramirez.

Author:  mvaldez [ 19 Mar 2005, 08:36 ]
Post subject:  More questions...

Bob, Joel:

Sorry, I forgot to ask,
Version of PHP, web server (Apache, IIS, etc), and server operative system.

Thanks,

Mario A. Valdez-Ramirez.

Author:  mvaldez [ 04 Apr 2005, 17:01 ]
Post subject:  Please contact me by email.

Bob, Joel:

Please contact me by email (mario@mariovaldez.org), I've been unable to replicate this problem, but I have made a patched version that may fix it.


Regards,

Mario A. Valdez-Ramirez.

Author:  zonks [ 11 Apr 2005, 12:33 ]
Post subject:  Re: Please contact me by email.

mvaldez wrote:
Bob, Joel:
Please contact me by email (mario@mariovaldez.org), I've been unable to replicate this problem, but I have made a patched version that may fix it.


Hi Mario,

Just poking to see if this issue has been resolved or if an 'offical' patch is still in the works. I am having the same problem using the newest versions of both FireFox and IE.

Server is FreeBSD running Apache and PHP ver 4.3.8.

Thanks,

Nick
zonksz at hotmail dot com

PS - Your code rocks -- it's exactly what I have been looking for and is a cinch to install!

Author:  Bob [ 21 Apr 2005, 16:35 ]
Post subject:  Re: Please contact me by email.

zonks wrote:
mvaldez wrote:
Bob, Joel:
Please contact me by email (mario@mariovaldez.org), I've been unable to replicate this problem, but I have made a patched version that may fix it.


Hi Mario,

Just poking to see if this issue has been resolved or if an 'offical' patch is still in the works. I am having the same problem using the newest versions of both FireFox and IE.

Server is FreeBSD running Apache and PHP ver 4.3.8.

Thanks,

Nick
zonksz at hotmail dot com

PS - Your code rocks -- it's exactly what I have been looking for and is a cinch to install!


I have the same problem
may be reversing back to previous phpproject version is only option?
any news about it?

Author:  mvaldez [ 10 May 2005, 00:47 ]
Post subject:  Double-login workaround...

To anybody having the double-login problem (you login in Phprojekt and when selecting the CMS tab you are asked again to login, OR when you logout from an user and login again the CMS thinks you are still logged as the first user), read on.


If you are using Apache and PHP is running as a SAPI module, you can use a .htaccess file to enable the PHP option session.auto_start. It seems that when session.auto_start is disabled, the Phprojekt and CMS module session become dissociated (each start using a different session).

The .htaccess should contain:
Code:
  php_value session.auto_start 1
  php_value output_buffering 16000


Test and tell, please. Also, note that this is a workaround, not the final solution.

Regards,

Mario A. Valdez-Ramirez.

Author:  mvaldez [ 10 May 2005, 03:03 ]
Post subject:  Patched version of the CMS module...

To anybody having the double-login problem, you can now download a patched version of the CMS module (0.6.1) from http://www.mariovaldez.net/software/cm_4p/download.php. This version 0.6.1 only addresses this bug and another minor one.

Please let me know if it works correctly in your installation.


Regards,

Mario A. Valdez-Ramirez.

Author:  zonks [ 25 May 2005, 16:10 ]
Post subject:  Re: Patched version of the CMS module...

mvaldez wrote:
Please let me know if it works correctly in your installation.

Hi Mario,

Upgraded to 0.6.1 and problem solved on my end. Thanks!

Nick
zonksz at hotmail dot com

Author:  mvaldez [ 26 May 2005, 13:39 ]
Post subject:  Great !

Zonks:

> Upgraded to 0.6.1 and problem
> solved on my end.

Great! I've received other sucess reports by email. So I think this problem ha been solved. :D


Regards,

Mario A. Valdez-Ramirez.

Page 1 of 1 All times are UTC - 7 hours
Powered by phpBB® Forum Software © phpBB Group
http://www.phpbb.com/