[web2py] Re: Unknown auth_user injected in 1.95.1

2011-04-29 Thread nic
Hi Guys, Well I reloaded a fresh copy of web2py and all is ok. I have kept the old files so I will do a bit more digging and try and find out what happened with the security. Thanks for your great responses. Best regards, Nic.

[web2py] Re: Unknown auth_user injected in 1.95.1

2011-04-29 Thread Anthony
Note, I think new apps created via admin are created from the 'welcome.w2p' packed version of the 'welcome' app in your /web2py/ root folder, not by copying the actual /applications/welcome/ folder. So, if the user got inserted into the packed 'welcome.w2p' file, then you'd have to replace that

[web2py] Re: Unknown auth_user injected in 1.95.1

2011-04-29 Thread nic
The user was indeed in the welcome app. I deleted the user from the welcome app then did a new simple app and the user was there. I am now re-installing web2py on my server Will let you know how it goes. I believe my server is secure but If this was someone gaining access to my server then they w

[web2py] Re: Unknown auth_user injected in 1.95.1

2011-04-29 Thread Stodge
Did someone gain unauthorised access to your server and add a database fixture to create that user? On Apr 29, 5:31 pm, nic wrote: > Thanks Ron, > > Looks like my web2py is corrupted. > I may have to reload web2py on my server I have been using the upgrade > button on the admin app for some time

[web2py] Re: Unknown auth_user injected in 1.95.1

2011-04-29 Thread ron_m
I would just download the web2py_src.zip and unpack it in a different directory and then run it from that directory python web2py.py do the simple app in admin and check the result. I believe the simple app builder is just an unpack and rename of the welcome app - the w2p file in the base of y

[web2py] Re: Unknown auth_user injected in 1.95.1

2011-04-29 Thread nic
Thanks Ron, Looks like my web2py is corrupted. I may have to reload web2py on my server I have been using the upgrade button on the admin app for some time now.

[web2py] Re: Unknown auth_user injected in 1.95.1

2011-04-29 Thread ron_m
I just did with 1.95.1 and the auth_user table is empty. I am not using powerpac tools, it is a plain install from the web2py_src.zip file download.

[web2py] Re: Unknown auth_user injected in 1.95.1

2011-04-29 Thread nic
I should add that I have been playing around with powerpac tools, which has some scripts around modifying users. But I do not think this is the problem. If someone could create a simple app and then look in the auth_user that would be very helpful.