Login Screen

geofflaw · March 17th, 2008, 12:06 PM

I have discovered that when I log on with an incorrect username, the 'login successful' screen comes up.

When it forwards me to the index page, I am not logged on, which is obviously correct, but shouldn't the splash screen indicate that the login was nor successful?

I am running Photopost integrated with phpBB3.

geofflaw · March 17th, 2008, 12:09 PM

If I put the wrong password it says invalid login. But if I put a valid password and a misspelt username, it says login successful.

Chuck S · March 17th, 2008, 03:22 PM

Okay well phpbb3 the password is checked which is good. I dont think anyone has ever tried what your trying to do I would need to install a clean phpbb3 and test that. At any rate your users mistyping their usernames should not be mistyping their names.

geofflaw · March 17th, 2008, 03:42 PM

OK I'll tell them you said so.

I can see we'll be getting a few people blaming the software for not logging them on properly, when all that happened was they spelt their name wrong.

Chuck S · March 17th, 2008, 03:55 PM

Well quite simply like I said I would need to start fresh and test but if we cant grab a result from the database I dont see why the login is not failed but I will respond when I have time to look at it

handicappedpets · April 26th, 2008, 08:11 PM

Same Problem - but Worse.
When I login with any username or password it says "Login Successful"
Installed at
http://handicappedpet.net/class
New installation of Photopost Classifieds and new installation of phpbb3 (data was imported from phpbb2).

handicappedpets · April 26th, 2008, 08:17 PM

... Also - After I register, phpbb requires I confirm by email - Photopost does not. So if I register but do not confirm, I can still post a classified.

Chuck S · April 26th, 2008, 09:39 PM

what exactly is your issue?

as far as phpbb3 admin settings we dont integrate with that we only integrate with the user login and we grab the user data usergroup etc and permissions are applied per usergroup in classifieds.

handicappedpets · April 26th, 2008, 09:47 PM

The main problem is that when a user types an incorrect username/password - the system says "Login Successful" - This has caused several problems already.

As far as the confirmations: A user who is not authorized for phpbb (because they have not confirmed their registration) can still post. This is not as critical as the first problem - but I thought reporting it to you might be helpful.

Chuck S · April 26th, 2008, 10:06 PM

If your not using the latest code then I suggest you download it

http://omegatron.net/pp-classifieds30/

If I enter a wrong password for a user I clearly get invalid login

handicappedpets · April 27th, 2008, 10:09 AM

I downloaded classifieds about a week ago from the link you sent me.
I will re-download and re-install if you recommend it -- although I'd like instructions to do so - do I need to re-configure? Will I need to re-do the custom header?

Alternately, is there a way I can tell if I'm on the current version.

I assume you tried it on your installation, and not mine, as mine still says "Login Successful" regardless of what I type in, although the user is NOT logged in.

Thank you,
Mark Robinson
HandicappedPet.Net/Class

Chuck S · April 27th, 2008, 11:07 AM

if yours says login successful then you have not uploaded all the files and that seems a simply issue. That was a bug we fixed months ago.

Just upload everything in the download except the config files install file and maybe header footer files or any custom style. Otherwise you want to upload all php and template language files etc. You may need to rerun the upgrade if its an older upgrade.

handicappedpets · April 27th, 2008, 12:24 PM

I downloaded and installed
pp-classifieds301, 2,153k
on 4/22
I have re-downloaded that file and verified that it is identical.

If this is not the current version, could you please direct me to it? Thank you.

Please also explain, if applicable: "You may need to rerun the upgrade if its an older upgrade."

Isn't there an easy way to tell what version I am running?

Chuck S · April 27th, 2008, 01:25 PM

Your free to post a link and test login here

Quite simply if your password is not equal to the hashed cookie we do not set checkpass to 1 as noted here therefore you get invalid login which is indeed shown on my test site

Code:

Content visible to verified customers only.

handicappedpets · April 27th, 2008, 03:19 PM

That's very interesting. Thank you.

Chuck S · April 27th, 2008, 03:21 PM

yeah I bolded the code so you can see what I mean.

handicappedpets · April 27th, 2008, 03:37 PM

Thank you. I really appreciate the time you're putting into this. with 40,000 posts on your profile, you're obviously very busy.

So here's my problem.
1) The login is not working right
2) You've suggested that I don't have the current version. OK
3) The Admin area now says version 2.6 is available but when I go to the link, it offers me 3.01 - which, as far as I can tell, is the version I purchased & downloaded on 4/22.
4) I don't know what to do. I can see that your test board is working fine and, obviously, your code is clear.

- How can I tell what version I have?
- If I don't have the current one, where can I get it? The members area contains the version I already downloaded.

Basically, how do I go about solving this?

Chuck S · April 27th, 2008, 04:57 PM

I have offered for you to post a url and test login here a couple times for me to see your site. Your version will be listed right in the admin panel statistics

You can pm me an ftp account as well

handicappedpets · April 30th, 2008, 05:32 PM

Sorry, I though you were suggesting that I test it on your site.

The URL is
handicappedpet.net/class

login: markqrobinson
pass: ##########

Thank you.
I will PM you an admin password

Chuck S · May 1st, 2008, 06:27 AM

Your login provided there shows me your login works correct. If i try to input a wrong password it gives me invalid login and you can only login of you enter the right login.

What am I missing?