Can't login!, encrypted files

Most likely this month. I am currently cleaning up and adding a few last minute features to the Test 2 branch.

Can't login!, encrypted files

FYI: the issue I had with the browser popping up a login box has gone away after deleting the cttest folder and the db, and installing release 3 from scratch. Now I just get the web-based login form in both FF or IE.

I think the difference was that this time I created the destination folder manually ahead of time.

According to my previous posts, I used the [make new folder] button during the install last time, so maybe there is a permission thing coming into play if the folder was created by the installer. (??)

Or, ya did something different with release 3.

At any rate, at least that issue went away.. I'm also not seeing 401 errors in my web logs anymore.

Eagerly awaiting the next release and more features. What's the latest ETA of the next release?

Can't login!, encrypted files

There is no HTTP authentication or any other change in the updated index.php that can cause this box. The difference between both index.php files is that the original file have it's own implementation of the function unserialize, while the new one is actually using unserialize.

The only way to reproduce the popup box here under Firefox is enabling sharing, so it is very likely that one of the folders that index.php tries to access have a permission problem.

Are all modules in cadmin visible? The following should show up: Main, Content, News, Import, Users, Templates, Blocks, File Types, Stats, and Online Admin.

The HTTP authentication causes the errors in the server log. As soon you find the real source of the popup and disable it, you should no longer see errors in the log.

Can't login!, encrypted files

Originally posted by Philipp:

I got the pop-up login box now with any script in my Contentteller test directory. After a little more research I discovered that the web sharing option caused this pop-up box.

Check all subdirectories in the cadmin folder. It is very likely that one have web sharing enabled. To disable web sharing: Right click on the folder => Properties => Web Sharing => Do not share this folder

I'm not using web sharing on any of the CT folders in the web site. All of the folders were created when I used the CT installer.

I did manage to get it to work by creating a LOCAL user with the same credentials as the user I created during the CT install. Equally strange, is after I get the pop-up box and log in there, I THEN get the CT login form and must log in again.

If I then tell my browser to remember the login, subsequent logins will go right to the CT login form.

Lastly, even tho I can now log in and use the admin CP, I'm getting 401 errors for every CP menu access in my web logs, so something's still not right.

05:46:14 67.81.122.157 GET 401 /cgi-bin/path/cadmin/index.php?action=managestories&opts=editstory-1

Can't login!, encrypted files

Originally posted by Philipp:

Odd, there is no HTTP authentication in the script, but I tried it now on my Windows Server 2003 test installation and run into the same issue. I investigate this problem right now.

Ah right, well, I can't see the code, so I just assumed you were using HTTP authentication. As I mentioned, when I enable HTTP authentication in phpMyAdmin, those pop-up login boxes appear, so that's what I thought you did. Whatever you changed in the 2nd script made the boxes appear tho.

Maybe you need to allow both (all?) types of authentication, and let the end-user pick what works for him, like phpMyAdmin does.

Can't login!, encrypted files

I got the pop-up login box now with any script in my Contentteller test directory. After a little more research I discovered that the web sharing option caused this pop-up box.

Check all subdirectories in the cadmin folder. It is very likely that one have web sharing enabled. To disable web sharing: Right click on the folder => Properties => Web Sharing => Do not share this folder

Can't login!, encrypted files

Odd, there is no HTTP authentication in the script, but I tried it now on my Windows Server 2003 test installation and run into the same issue. I investigate this problem right now.

Can't login!, encrypted files

Originally posted by Philipp:

This box is not coming from Contentteller.

Right, it's coming from the browser.

Look like you password protected the directory and IE stored that login.

I'm not sure...

When using the original cadmin index file, all the browsers showed the HTML page for login (I assume they were doing cookie-based login -- but I can't look at the code). It would accept my l/p, but then go back to the login page.

When I updated the cadmin index file, FF and NS started popping up the browser's authentication box when HTTP authentication is requested from the web page.

But for some reason, IE6 was still showing the html login page, and inputting my credentials would work.

I checked the privs on the CT test directoyry, and there is no way in Windows/IIS to password protect a folder. The privs are set to allow the anon internet user to have R/W accessd to the directory, which is the way all the other scripts are set.

I can tell you that when I try to use HTTP authentication in phpMyAdmin, it also failes (all browsers), but cookie login does work (all browsers).

What's very weird is under phpMyAdmin, if I hit ESC at the first login pop-up box, it get a different pop-up box, and inputting my credentials there *does* work.

Some screen shots might help:

FF7 initial pop-up login box (cadmin index.php #2)
 http://www.specforce.net/images/ct2_FF2_login.JPG
-----------------------------------------------------------------------

PhpMyAdmin login after hitting [ESC] at the first login box (which looks identiacl to the one above (ie. no script name..)

 http://www.specforce.net/images/phpmya_http_login.JPG

I've flushed the caches and cleared cookies and saved password numerous times (In all 3 browsers) and nothing matters. Dunno how IE is still doing forms-based login..

Any ideas?? I really hate having to use IE to test CT2!

Can't login!, encrypted files

This box is not coming from Contentteller. Look like you password protected the directory and IE stored that login.

Can't login!, encrypted files

Originally posted by Philipp:

Originally posted by Rushian:

I wiped everything (new db and new folder) and started over (3 times!), and I still can't login to the admin interface.

This time I left the username as admin with 123 as the password and it still goes back to the login screen. . .

Please send me a private message with the location of your test installation. Additional, place a file phptest.php in the cadmin folder with the following code:

<?php phpinfo(); ?>

Ok, I sent you the email.

I updated the login script, and can get in with IE6, but not NS7 or FF2.

I noticed IE6 still uses the login page, but NS & FF pop up a box for username and password....

Can't login!, encrypted files

I just rewrote the admin control panel login function. Here the updated file:
 http://www.esselbach.com/scripts/ct2_cadminindex.zip

Please upload the new index.php to your cadmin directory and let me know if this fixes the problem for you.

On another note the SEO function is actually working under IIS 6.0 as long PHP is running as ISAPI module.

Can't login!, encrypted files

Originally posted by Rushian:

I wiped everything (new db and new folder) and started over (3 times!), and I still can't login to the admin interface.

This time I left the username as admin with 123 as the password and it still goes back to the login screen. . .

Please send me a private message with the location of your test installation. Additional, place a file phptest.php in the cadmin folder with the following code:

<?php phpinfo(); ?>

Can't login!, encrypted files

Couldn't run the CT installer without first manually installing the ioncube loder into my php.ini file then re-starting IIS. There needs to be much better docs on doing this (or the installer should do it, or at least tell me I need to do it at the end.)

The Windows installer is usual installing the ionCube loader automatically. I didn't know that IIS is not supported.

After I did that, I got the install screens, and when thru all the steps, but when I get to the admin login screen, I put in my username and password, (which I changed both display name and username to be "Rushian" during the install) and I get a message "Thank you, one moment please", then I'm taken back to the login screen again. I tried IE, FF and NS7 and they all do the same thing. So far, NOT so good! How do I fix this?

Sounds like a cookie problem. Never had this before. Can you login on your front page?

I *really* don't like the encrypted files.

I am afraid this is the only way to enforce expire date. I originally was myself not a big fan of encoded scripts and tried to avoid them at any cost. I changed my mind because a warez group release last year a pirated version of Storyteller where all copyright notices were removed. This version had also a bad inpact on sales.

Here two examples comparing the original version against the pirated version:

Original:

    /*

    ############################################################################

    #                                                                          #

    # Esselbach Storyteller CMS System                                         #

    #                                                                          #

    # (C) 2002 - 2005 by Esselbach Internet Solutions                          #

    # Available from  http://www.esselbach.com                                  #

    #                                                                          #

    # Storyteller CMS System is not free software                              #    

    # Visit  http://www.esselbach.com/page6.html for the license agreement      #

    #                                                                          #    

    ############################################################################

    */ 

Pirated:

    /*

    ############################################################################

    #                                                                          #

    # Esselbach Storyteller CMS System                                         #

    #                                                                          #

    ############################################################################

    */ 

Original:

    function MailHeader($var, $var2, $var3, $var4)

    {

    

        $headers = "From: ".$var." <".$var2.">r n";

        $headers .= "To: ".$var3." <".$var4.">r n";

        $headers .= "Reply-To: ".$var." <$var2>r n";

        $headers .= "MIME-Version: 1.0n";

        $headers .= "Content-type: text/plain; charset=iso-8859-1n";        

        $headers .= "X-Priority: 1n";

        $headers .= "X-MSMail-Priority: Highn";

        $headers .= "X-Mailer: Esselbach Storyteller CMS";    

        

        return $headers;

    }

Pirated:

    function MailHeader($var, $var2, $var3, $var4)

    {



        $headers = "From: ".$var." <".$var2.">r n";

        $headers .= "To: ".$var3." <".$var4.">r n";

        $headers .= "Reply-To: ".$var." <$var2>r n";

        $headers .= "MIME-Version: 1.0n";

        $headers .= "Content-type: text/plain; charset=iso-8859-1n";

        $headers .= "X-Priority: 1n";

        $headers .= "X-MSMail-Priority: Highn";



        return $headers;

    }

They made look this like a public domain script after there is no indication that this is a commercial script . I hope you understand me now better.

I like to tinker with the code to add new things, or fix Win32/IIS glitches, etc. or hell, add new features/mods.. Now I can't do that! This will severely impact my use of the system.

There is no longer a need to modify the main code base. Nearly all modifications can be done with additional modules or templates. The new system is much more modification friendly then the old code base.

IIS 6.0 should be fully supported in Test 2. I believe the only problem right now is the SEO feature. The mail issue exists no longer because you can use SMTP instead of Sendmail. Microsoft SQL Server support is even on the do list for 2.1

Can't login!, encrypted files

I wiped everything (new db and new folder) and started over (3 times!), and I still can't login to the admin interface.

This time I left the username as admin with 123 as the password and it still goes back to the login screen. . .