Re: [users] Difficulty getting started...

2006-03-28 Thread Robin Bowes
Bob Hutchinson wrote:
 On Sunday 26 Mar 2006 19:42, Robin Bowes wrote:
 
Bill Shupp wrote:

Perhaps it's missing in the form.  Can you verify that?  If so, I'm
surprised this has not been reported before.

Bill,

I've done some more checking. I've turned on the mysql query log, and
the query that is being sent when I try to login with test@test.com/test
is:

Email='test@test.com' and
Password='543e1d35c7c833e578709d2baabdc79c' and
Status='active' LIMIT 1

Looking in the accounts table, this is not the md5 hash of test:

mysql select md5('test'), password from accounts;
+--+--+

| md5('test')  | password |

+--+--+

| 098f6bcd4621d373cade4e832627b4f6 | 098f6bcd4621d373cade4e832627b4f6 |

+--+--+
1 row in set (0.00 sec)

Also, looking in index.php, I see this block of code:

} else if($_REQUEST['state'] == login_screen) {

// LOGIN SCREEN

$smarty-display('header.tpl');
require('src/login_screen.php');
$smarty-display('footer.tpl');
exit;

The file 'login_screen.php' does not exist:

[EMAIL PROTECTED] vegadns-0.9.9.1]# pwd
/var/www/vegadns/vegadns-0.9.9.1
[EMAIL PROTECTED] vegadns-0.9.9.1]# find . -name login_screen.php

Does that shed any light on the issue?
 
 
 looks to me like you have found a piece of leftover code, you could try 
 replacing the 
 require('src/login_screen.php');
 with
 $smarty-display('login_screen.tpl');
 
 I have to admit I have never stumbled across this bug, probably because
 
 $_REQUEST['state'] == login_screen is never called AFAICT
 
 vegadns-0.9.9.1  grep -rni 'login_screen' *
 index.php:112:$smarty-display('login_screen.tpl');
 index.php:128:} else if($_REQUEST['state'] == login_screen) {
 index.php:133:require('src/login_screen.php');
 
 Are you managing to log in at all?
 Have a look at the db with phpmyadmin or somesuch, it might help you resolve 
 this

When I first connect after a clean install I am logged in automatically.
It appears that I can use most of the functionality but checking the
logs reveals that several variables are not being passed between forms
(cid being one example that prevent login).

If I log out I am unable to log back in again even with the original
password.

I've checked with phpmyadmin (and mysql command line) and the
username/password remains unchanged.

The MySQL query log actually shows that the app. is submitting the wrong
md5 hashed password (see above).

I'm sure there's a logical explanation for all this but I can't put my
finger on it just at the moment...

R.


Re: [users] Difficulty getting started...

2006-03-28 Thread Robin Bowes
Ron Guerin wrote:
 Bill Shupp wrote:
 
 
I'm wondering if this is a PHP 5 issue.  Would you be willing to provide
me with a login?  Assuming the private directories are setup, I would
not need sudo, just access to the database.  If so, just send me the
login info off-list, and I'll probably have time today to take a look.
 
 
 You may have missed this...
 
 I've tried this under php4 (I installed php-4.4.2 from source on a FC5
 box with apache 2.2 + MySQL 5.0.18)

Indeed.

I'm seeing the same behaviour with both php4 and php5 so I don't think
that's the issue.

I suspect it may be a php or apache configuration issue, but I'm not
sure what.

Hopefully Bill will be able to find something when he looks later today.

Cheers,

R.


Re: [users] Difficulty getting started...

2006-03-26 Thread Robin Bowes
Bill Shupp wrote:
 
 If 0.9.9.1 behaves the same way, let me know.. I have not tested with
 php 5, so that could be related.

Bill,

With 0.9.9.1, I get the following error when trying to change the admin
details from the initial screen:

Notice: Undefined index: cid in
/var/www/vegadns/vegadns-0.9.9.1/src/functions.php on line 342
You have an error in your SQL syntax; check the manual that corresponds
to your MySQL server version for the right syntax to use near '' at line 1

Line 342 is:

return $_REQUEST['cid'];


I put some code in to print $_REQUEST and started again.

When I went to the initial page, $_REQUEST contains this:

Array
(
[VDNSSessid] = lkb7cl4ab0tqn34hfksf54kk04
[state] = logged_in
[mode] = users
[user_mode] = edit_account
[cid] = 1
[theme] = clean
[geeklog] = 2
[password] = 1690e1e1465cd2dcc876f5a3d1a50590
[PHPSESSID] = ecop6v1ts4ptuucl3r5c4vd9s3
)

After changing the admin values and hitting edit, it contains this:

Array
(
[state] = logged_in
[mode] = users
[VDNSSessid] = lkb7cl4ab0tqn34hfksf54kk04
[user_mode] = edit_account_now
[first_name] = Robin
[last_name] = Bowes
[email_address] = [EMAIL PROTECTED]
[phone] =
[password] = 1690e1e1465cd2dcc876f5a3d1a50590
[password2] = password
[account_type] = senior_admin
[status] = active
[theme] = clean
[geeklog] = 2
[PHPSESSID] = ecop6v1ts4ptuucl3r5c4vd9s3
)

As you can see, cid is not set in the second example.

Any idea why?

R.


Re: [users] Difficulty getting started...

2006-03-25 Thread Bill Shupp
Robin Bowes wrote:
 Hi,
 
 I'm just checking out vegadns and am having trouble getting started.
 
 I on a FC4 platform with:
 
 httpd-2.0.54-10.3
 php-5.0.4-10.5
 mysql-4.1.16-1.FC4.1
 
 I started by trying the 1.1.5 dev release.
 
 All seemed to go well, and the first screen appears requesting that I
 Please edit your account settings for the initial 'senior_admin'
 
 However, when I enter the new values, and hit edit I get this error:
 
 Error: passwords do not match
 
 (believe me - they do!)
 
 I then dropped the vegadns database and started again, only instead of
 changing the default values I logged out. So, I should be able login
 using the default settings of test@test.com / test. When I try that I
 see the following error:
 
 Error signing on: incorrect email address or password
 
 Any idea what's going wrong? Are there any particular PHP settings that
 I need to have set or unset?

Don't use 1.1.5 unless you are developing.  There are several incomplete
areas.  Use 0.9.9.1.

Regards,

Bill


Re: [users] Difficulty getting started...

2006-03-25 Thread Bill Shupp
Bill Shupp wrote:
 Robin Bowes wrote:
 Hi,

 I'm just checking out vegadns and am having trouble getting started.

 I on a FC4 platform with:

 httpd-2.0.54-10.3
 php-5.0.4-10.5
 mysql-4.1.16-1.FC4.1

 I started by trying the 1.1.5 dev release.

 All seemed to go well, and the first screen appears requesting that I
 Please edit your account settings for the initial 'senior_admin'

 However, when I enter the new values, and hit edit I get this error:

 Error: passwords do not match

 (believe me - they do!)

 I then dropped the vegadns database and started again, only instead of
 changing the default values I logged out. So, I should be able login
 using the default settings of test@test.com / test. When I try that I
 see the following error:

 Error signing on: incorrect email address or password

 Any idea what's going wrong? Are there any particular PHP settings that
 I need to have set or unset?
 
 Don't use 1.1.5 unless you are developing.  There are several incomplete
 areas.  Use 0.9.9.1.

If 0.9.9.1 behaves the same way, let me know.. I have not tested with
php 5, so that could be related.

Regards,

Bill