Registered Users Can't Login Actual User Status:Offline

Posted: Sun Nov 09, 2003 9:46 pm

What is your purpose to hide it?

Nuke Soldier Joined: Nov 02, 2003 Posts: 23

it's an option my DNS forwarder provides... looks a lot nicer than an ip

Posted: Sun Nov 09, 2003 11:25 pm

I think that it is a non-sense. If you want to hide you at internet, you need not open your website, I mean. It is a bad option.

Captain Joined: Oct 20, 2003 Posts: 335

Quote:

3. And last but not least if those things don't work we can try clearing the
cookies. You can click the tab that says GENERAL with will be on the top of
the page. Or you can get there this way Open Internet Explorer then go find
the on the Top Bar and click TOOLS>>INTERNET OPTIONS>>GENERAL then click the
DELETE COOKIES button in the center of the page. And it will ask if you can
to delete all Temporary files and select YES. Then try and see if it works..

Note that IE does NOT adhere to web standards (which is why you should design in Mozilla and check your design with IE). But anyway, in some versions of IE, after you clear the cookies, YOU HAVE TO CLOSE THE BROWSER COMPLETELY AND THEN RE-OPEN IT, in order for the cookie clearing to take place.

Quote:

I think that it is a non-sense. If you want to hide you at internet, you need not open your website, I mean. It is a bad option.

Its not a 'bad' option. It has a purpose. For instance- if you host multiple domains, but dont want to put them all on their own hosting account ($$$), you can put them all on the same server.

Then you can 'point' the various domain names to their proper folders all on the same server.

The 'problem' with this is, when the user types in the domain name, it will take them to the proper folder...... BUT, the address bar will not say the new domain name, it will show that you are in a folder on your main domain.

The stealth option uses frame forwarding, an 'invisible' frame at the top of the page (so users dont see it). Since the browser takes its address (in the address bar) from the top 'invisible' frame, it keeps the forwarded domain name in the address bar (instead of showing it as a folder of your main domain).

In summary-

A domain that is forwarded Without stealth: A user will see the folder name in the address bar.

A domain that is forwarded WITH stealth: A user will see the DOMAIN NAME in the address bar.

Free69 - GREAT avatar! Now if I could get my mind back on work.... Mr. Green

Nuke Cadet Joined: Dec 12, 2003 Posts: 5

chatserv wrote:

You can make the fix yourself, just open modules/Your_Account/index.php and replace all instances of:

Code:

Header("Location: modules

with:

Code:

Header("Refresh: 0;url=modules

This corrected the problem for me.

My current config:
Windows Server 2000/IIS
MySQL
Latest PHP

Private Joined: Nov 23, 2003 Posts: 39

I am having what I think to be the same issue. Admin logs on ok, but no users can log in.

I do not have SMTP set up, so no one can register untill I fix it. 2 questions,

Can I disable teh email registration,

and,

is there a fix ? It takes users directly to there profile and does not actually log them in.

Private Joined: Nov 23, 2003 Posts: 39

Problem solved,

I did the fix that was stated at the beginning of this article,

Code:

You can make the fix yourself, just open modules/Your_Account/index.php and replace all instances of:
Code:
Header("Location: modules

with:
Code:
Header("Refresh: 0;url=modules

Thanks

Nuke Cadet Joined: Dec 17, 2003 Posts: 1

I had the same problem and set my cookies, then I completed the fix as specified and it is working fine.

Thanks

Nuke Cadet Joined: Oct 01, 2003 Posts: 4

Zhen-Xjell wrote:

You know the new subdomain I launched today:

http://phpnuke.nukecops.com

Well I experienced the problem where I couldn't stay logged in as a user or admin. That was because the subdomain wasn't created yet. Instead of

phpnuke.nukecops.com

I was going to

nukecops.com/somewhere/someplace.php

Once I got the subdomain up and running properly with the cookies setup just right to the right FDQN, I was able to log in *and* stay logged in.

Exactly. There is a problem using cookies when you use redirection. Lots of people, like myself, use "domain forwarding" and don't have the option of getting the subdomain up and running.

When you use domain forwarding, the cookies are still from "www.yoursite/yoursitedir/yoursiteotherdir" and not "www.domainforwarded.com" url

IE and some others have a default security setting that doesn't allow "third party" cookies.

Is there anyway to explicitly change the cookies to be set to "www.domainforwarded.com" instead of "www.yoursite/yoursitedir/yoursiteotherdir"

Lee

Nuke Cadet Joined: Jan 03, 2004 Posts: 2

Zhen-Xjell wrote:

You know the new subdomain
Exactly. There is a problem using cookies when you use redirection. Lots of people, like myself, use "domain forwarding" and don't have the option of getting the subdomain up and running.

When you use domain forwarding, the cookies are still from "www.yoursite/yoursitedir/yoursiteotherdir" and not "www.domainforwarded.com" url

IE and some others have a default security setting that doesn't allow "third party" cookies.

Is there anyway to explicitly change the cookies to be set to "www.domainforwarded.com" instead of "www.yoursite/yoursitedir/yoursiteotherdir"

Lee

I have the same problem but with redirect domain. (ex. yoursite.tk)
And I don't know how to fix it. Sad

Nuke Soldier Joined: May 28, 2003 Posts: 22

chatserv wrote:

You can make the fix yourself, just open modules/Your_Account/index.php and replace all instances of:

Code:

Header("Location: modules

with:

Code:

Header("Refresh: 0;url=modules

Chatserv can you tell me why this is necessary and why it is not automatically coded to solve this problem?

And while I have your attention Laughing

do you have any idea why, since my upgrade to 7.0 - I have no posts in my forums. I take that back - they are there, and even the statisctics are correct - but I says I have no posts in the forums.

Thanks for any help you might be able to give me.

Shep

Lieutenant Joined: Dec 30, 2003 Posts: 283

Applied the refresh patch. The login from top (next to Search, etc.) works fine (there is actually a refersh happening).

But the login from the "login" block does nothing. No refresh, and it says not logged in. Please provide the other 1/2 of the solution.

thanks,

steve Confused

Nuke Soldier Joined: Nov 03, 2003 Posts: 12

has anyone fixed this problem yet? I'm am now unable to login to my webserver on my IE broswer..

Seems all the ones that were able to fix this problem were running Windows. Is there an apache/Linux solution? I've done just about everything ive seen posted to fix my site, but logins are still not working properly. Anyone able to help with this seemingly large bug?

Anyone able to provide links for a fix on Linux running an apache server?

i would even be happy with some sort of reply saying.. "No, we havent found a complete and total fix for everyone yet" just to know someone with a staff status acknowlegdes this problem.

Thank you for any help you can provide.

Nuke Soldier Joined: Aug 30, 2003 Posts: 12

Well, I have spent 5 days researching the problem. The Main problem is that Internet Explorer has gone to a P3P Policy type system for thier cookies.

If you have 3rd party cookies, for example url redirection services with stealthed urls. You can do what I did and modify the mainfile.php and add the following line.

Code:

header("P3P: policyref=\"http://www.chaoscities.com/p3p.xml\"\, CP=\"CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE\"");

now your probably wondering Where should you put that line in the mainfile.php

Here is where I stuck mine... Right after the main Header redirection and GET POST checks.

Code:

/* FOLLOWING TWO LINES ARE DEPRECATED BUT ARE HERE FOR OLD MODULES COMPATIBILITY */
/* PLEASE START USING THE NEW SQL ABSTRACTION LAYER. SEE MODULES DOC FOR DETAILS */
require_once("includes/sql_layer.php");
$dbi = sql_connect($dbhost, $dbuname, $dbpass, $dbname);
}

//P3P Compact Privacy Policy (Generator Used from http://p3pedit.com/)
header("P3P: policyref=\"http://www.chaoscities.com/p3p.xml\"\, CP=\"CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE\"");

$mainfile = 1;
$sql = "SELECT sitename, nukeurl, site_logo, ....... Version_Num FROM ".$prefix."_config";
$result = $db->sql_query($sql);
$row = $db->sql_fetchrow($result);
$sitename = $row[sitename];

Of course, you should be advised to create your own Compact Privacy Policy for your Domain, along with a P3P.XML containing your Privacy guidlines and P3P image for your site. Along with a Public Privacy Policy Statement for your visitors, with a link to it on every page cookies are to be used.

This in effect tells the IE browser that your a safe site and to allow the use of 3rd Party Cookies from techniques such as URL Stealthing and Redirection.

I have had my users fully test this out and it has worked for me flawlessly.

To Obtain your own P3P.XML Policy Reference files for your domain root and the CP (Compact Policy) Codes you can use an online Generator such as http://p3pedit.com/ or to get your FREE P3P Solution today and ensure your Web site is in basic P3P compliance. Go Here http://www.privacycouncil.com/freep3pfix.php

You can also try http://p3pwiz.com/

To find out what P3P is and why it's in your Browsers, go here http://www.w3.org/P3P/

I hope this clears a few things up and solves a few problems along the way, with privacy policies and PHP Nuke Logins in general.

Thanks for your time.

Peace
-Mikron

Nuke Soldier Joined: Feb 05, 2004 Posts: 21

Not sure if this helps but i just noticed when a user gets an email verification link it misses the rest of my url....

Code:

http://www.mysite.com/modules.php?name=Your_Account&op=activate&username=testtest&check_num=000111222000blahblah0000303484338dj

it should be actually this url instead...

Code:

http://www.mysite.com/cars/html/modules.php?name=Your_Account&op=activate&username=testtest&check_num=000111222000blahblah0000303484338dj

I had to manualy type them into the address bar to get verification. I got verification and everything works great.
Anyone know what file i have to edit to make this change.