Clean PP5 install, admin and phpbb2 integration problems

[jcall]

After a fresh install of PP5 (see Install section below) with phpBB2 integration, I have 3 problems:
1) I can't seem to login/logout of PP directly. I have to use my phpBB2 login/logout, then switch over to PP. If I use PP to login, the login seems successful, but the link in the header is still named "Login" rather than "Logout".

The misc.php?action=logout page also gives the following errors (which I know is typically due to whitespace, but I've already deleted any trailing whitespace in both files referenced in the error):

Warning: Cannot modify header information - headers already sent by (output started at /usr/www/users/croppi2/idea-gallery/templates/thumbnail.tmpl:12) in /usr/www/users/croppi2/idea-gallery/forums/phpbb2.php on line 226

Warning: Cannot modify header information - headers already sent by (output started at /usr/www/users/croppi2/idea-gallery/templates/thumbnail.tmpl:12) in /usr/www/users/croppi2/idea-gallery/forums/phpbb2.php on line 227

2) adm-index.php isn't working properly for me. "View Source" for adm-index.php is as follows:

Content visible to verified customers only.

3) As you may have already guessed, I get the text "Top Posters" at the top of each and every page I've visited in this particular PP install.


Installation procedure section: I downloaded PP5, extracted it on my WinXP box, and used FileZilla to upload the extracted files into a new directory on my server. I already had a database created for PP use, but it had data from a previous test install, so I went into phpMyAdmin and dropped all of the tables.

I opened up the permissions on the "upload" directory, and recursive permissions on the "data" directory. I also changed permissions on config-inc.php and config-int.php so that the install could write to them.

I then ran the install. The install seemed fine, but didn't create the 3 required usergroups. I created them as follows via phpMyAdmin:

INSERT INTO usergroups VALUES ('1','Anonymous','','','','','',0,0,0,0,0,0,0), ('2','Admin',1,1,1,'','',1,1,1,1,0,0,0), ('3','Regular Users','',1,1,'','',1,1,0,1,0,0,0);

When I noticed the problems described above, I decided to check my cookie settings. Since adm-index.php was non-functional, I checked via phpMyAdmin. The cookie prefix was correct, but I noticed that the cookie domain field was blank. I set it to .croppinparadise.com . I also realized that I have an apostrophe in the name of my site, and so I removed the apostrophe from the "Web site name" field, changing it from Croppin' Paradise to Croppin Paradise.

I also manually added the admin email address. I thought I entered it during the install, but I could have missed it. The only other changes via phpMyAdmin were to modify the path to the header and footer files.

I also added an "Admin" group in phpBB (NOT changing any PP configuration) and added my main admin user to that phpBB group.

Helpful info section (as per the sticky):
- FreeBSD 4.8-STABLE
- Apache/1.3.29
- 4.3.10 (Zend: 1.3.0)
- MySQL 4.0.18
- Shared host
- server is under my control
- link: www.croppinparadise.com/idea-gallery (I can PM you login info, but there aren't any photos yet)

Any ideas??

-jared

[Chuck S]

Have you checked both misc.php and phpbb2.php for whitespace just in case?

I registered a user and I have an admin button as a regular user.

Even though I get top posters if I visit your adm-index.php

Try uploading all PP5 files again except the config files.

[jcall]

<disclaimer>
This is a long, verbose post. I tried to be as narrative as possible while troubleshooting, to answer any questions that might arise as to what I've tested and changed, as well as the results I've seen.

Read on.
</disclaimer>

I'd already edited both files, checked for whitespace before the <? php (didn't find any) and after the ?>. phpbb2.php had one extra line, which I deleted. The error persists. I've tried in IE and Firefox.

I'll re-upload, minus the 2 config files, as you suggested.

I just re-uploaded every file except for the config-inc.php and config-int.php. I uploaded not just the main directory, but *all* files from the photopost5.zip file, including stylesheets, language files, etc. I verified the permissions on the upload and data (and subdirs) directories - - they were still 777.

Now, let's try again. First, IE. Seems ok (after I renamed install.php) at first glance, my browser remembered the cookie and I'm logged in. I can't logout. Says that logout is successful, but then I'm still logged in. I'll close the browser, re-open it, clear history, cache and cookies, close the browser, re-open it, and try again.

Ok, now I'm not logged in. I'll login. Can't login. I tried 2 different users. It says that they're both invalid user/password combinations. I login to phpbb as one of those users, then switch back to PP. I'm logged in, with an Admin link (but I'm not an admin). Admin area appears to work, though I only have the "General" box on the left, not the entire set of admin links. Is this the way it's supposed to work?

Let's see if I can logout. I'll try the normal link, and if that doesn't work, I'll try the one inside the admin.

Logout link on index.php failed to log me out (just as before). Logout link on adm-index.php also failed to log me out (just as before). Logging out via phpBB works just fine. I suppose that this has an easy workaround - - just replace the targets for the PP logout links with the phpBB logout links. It's a duct-tape fix, but it'd work.

I'll put my header and footer back on to see what that does. I wonder if that was somehow causing the other problems.

Header and footer now back on - - no additional problems or problems solved, just the header and footer (which is what one would expect).

I'll put my customized default.css on next.

New default.css seems just fine as well.

I registered a new user, and experienced all the same behavior as explained above (i.e. can only login/logout from phpBB, have an Admin link w/limited menu).

I went into the admin menu, as the full admin user, and changed my integration to use a MySQL user with RW rights to the phpBB database (I'd been using a user with read-only rights). Same login/logout problems. Changed my phpBB2 "Domain Name" setting from croppinparadise.com to www.croppinparadise.com. Same problem.

I added trailing slashes to the "Server Path to Forum directory" and "Server Path to PhotoPost directory" config items. No change, so I removed the trailing slashes.

Noticed that "down for maintenance" is still spelled incorrectly. Fixed that.

I really have no idea what could have been causing the "header already sent" and "Top Posters" problems, as that's the 2nd time I've re-uploaded all the files. I wonder if one CR/LF was still in "DOS" style after the FTP transfer. In any case, the only apparent problems left are these:

1) Login/logout from PP doesn't seem to work, though login/logout from integrated phpBB works just fine.
2) Once you can login, everyone gets an Admin link, with a subset normal Admin area. Is this normal?

I wonder if I messed things up somehow when I created those 3 usergroups in phpMyAdmin. Let's go have a look.

PP Admin - - the only group with a "yes" under "Admin Access?" is the Admin group. The only user in this phpBB group is the main admin user (who is also the only one who gets a "full" admin link.

Let's see if I can find that in the code. What? I can now magically login/logout from PP. I wonder if I just had to CTRL-F5 after changing the phpBB domain name. ???

I'll change the integration user back to the RO user and see if login/logout still works. Changed it to the RO user - - now I can't login/logout via PP anymore. Changed it back to the RW user. Still can't login/logout. ??? Changed it to a "full" access user. Still can't login/logout. What's going on? This is bizarre.

Chuck - - if you can try and chew on that, I'll try and find the part of the code that decides whether or not to show the Admin link.

Wait - - that's not the important part - - the important part is whether or not they should have access to adm-index.php, even if they type it in manually. That will take a bit more digging, unless you know how to fix that one.

-jared

[Chuck S]

Here is your whole cookie issue

Your forum cookie domain is set to .croppinparadise.com

Your photopost cookie domain is set to blank

That is why the logout does not work

If you match your cookies up you will have no issues at all

[jcall]

Thanks, but that isn't it. Here is a cut'n'paste from phpMyAdmin:

173 PhotoPost Cookie Domain cookie_domain .yourdomain.com; sets the cookie to be usable acro... .croppinparadise.com 3 12

http://www.croppinparadise.com/idea-.../adm-index.php > Cookie Settings >PhotoPost Cookie Domain also reports a current setting of .croppinparadise.com.

As you can see, it's set to .croppinparadise.com. I'll take a packet trace (or maybe just header trace) to see if PP is actually sending the cookie. I'm with you - - I suspect it's not.

It's set to, though. Might this be a code problem? If not, any other ideas?

Additionally, how would this affect the Admin link showing up to non-admin users?

-jared

[Chuck S]

If you login through your gallery most definately your cookie domain is set to blank

This is right from the cookie

www.croppinparadise.com

If I log into the forum it is this

.croppinparadise.com

You can choose to beleive me on cookie or not. I use Mozilla and it has a wonderful little view cookie utility that shows the values. I get the above as stated when I see login through each of your products respectively.

I have already stated you have regular users set to mod access by the query you inserted

INSERT INTO usergroups VALUES ('1','Anonymous','','','','','',0,0,0,0,0,0,0), ('2','Admin',1,1,1,'','',1,1,1,1,0,0,0), ('3','Regular Users','',1,1,'','',1,1,0,1,0,0,0);

Look at your regular users insert the 4th field modaccess has a 1

You can view the settings table in mysql and view the cookie domain setting 173 I beleive as well as view your usergroups table and fix these if you can not get into admin.

[jcall]

I do believe you that the cookie is not being sent to the browser. Firefox LiveHTTPHeaders and WebDeveloper extensions both show that the cookie is not being sent. I'm just saying that I have the cookie domain set properly. That's why I quoted the line from phpMyAdmin and from the admin utility.

I *know* that this is a cookie problem, but I don't believe it to be a cookie *configuration* problem, as I've quoted the configuration and it appears to be correct.

I appreciate your assistance - - I'll keep plugging along and check your other suggestions.

Thanks!

-jared

[jcall]

I have already stated you have regular users set to mod access by the query you inserted

FWIW, I see the post that you're referring to in my email, but it appears that the post was deleted, as it doesn't show up in this thread.

Please remember that the only reason I inserted those values (which I got from the 4.86 install - - I should have copied them from the 5.0 install) was because the groups didn't get created by the install. On another thread you stated that you'd fixed that in the blind rev of 4.86. It's apparently either not all the way fixed or the fix was not put into the 5.0 code.

Thanks again! I'll keep at it.

-jared

[jcall]

Perfect on the modaccess flag. I turned it off, and the Admin link is gone for regular users. Thanks!

Now, on to the phpbb2 modification you mentioned. I'll report back in a few.

-jared

[jcall]

Chuck - - the tip in your mysteriously edited/deleted post fixed it! For anyone else with this problem, here's what he told me to do:

Try this in phpbb2.php

Find this

Content visible to verified customers only.

Underneath it place this

Content visible to verified customers only.

See if that clears the cookie

All seems to work wonderfully now! I'll delete your test user, my extra test users, and send you the document you're waiting for.

Thanks again!

-jared

[jcall]

Looks like I spoke too soon - - it doesn't seem like the cookie is being cleared properly within the same browser session. Here's what happens:
1) login to PP as any valid user (login successful)
2) logout but don't close browser
3) login again to PP as the *same* user (login successful)
4) logout, don't close browser
5) login as a different user (Invalid login. Please check your username and password, or register.)
6) close browser (keeping browser open but clearing cookies doesn't fix the problem)
7) open browser again, login to PP as any user (login successful).

IOW, I can login/logout as the *same* user as often as I want in the same browser session. If I want to login as a different user, I need to close/reopen the browser.

This is a minor issue, really, and I don't think that many users would see it.

Just thought I'd mention it, though.

-jared

[Chuck S]

Jared

You still did not comment on what I said about your cookie domains but anyway if it works I am happy for ya.

I would still say although I cant confirm your cookies are being written differently

[jcall]

On the cookie domains - - phpbb and PP are *configured* to use the same cookie domain. I have checked the settings both in the admin tools and in phpMyAdmin. I have quoted those settings. I agree that PP was not sending the proper cookie, in spite of the settings being correct.

After making your suggested change to phpbb2.php, the login/logout is working fine now.

Thanks again.

-jared