Topic: Another E-Blah authentication problem

[Zippy]

Yes, that appears to be working.  I'll check it out more when I get home. If there are any problems I'll let you know!

Thanks! :-)

[Mike Bobbitt]

Glad to hear it... I've updated the zip file, thanks for the bug report.

[Zippy]

*pulls all hair from head*

For some reason now when I login to the forum (username-test  password-1234), album.pl only recognizes me for a few page navigations (home page, then upload a photo, go look at it, then go back to upload another) and then thinks I am username "albumpassword"  and password "1234"


2773: Entering subroutine: Authenticate
3614: Entering subroutine: cookieLogin
3873: [eblah_pw] = [1234] (u:-p:)
3788: Found e-Blah password info: eblah_pw
3790: $mypassword set to 1234
3873: [eblah_un] = [test] (u:-p:1234)
3780: Found e-Blah username: eblah_un
3782: $myusername set to test
3873: [albumusername] = [test] (u:test-p:1234)
3850: Found generic userid info: test
3852: $myusername set to test
3858: Found Native album.pl username info: albumusername
3860: $myusername set to test
3873: [eblah_Logout1] = [$username] (u:test-p:1234)
3850: Found generic userid info: albumpassword
3852: $myusername set to albumpassword
3873: [albumpassword] = [1234] (u:albumpassword-p:1234)
3842: Found generic password info: 1234
3844: $mypassword set to 1234
3866: Found Native album.pl password info: albumpassword
3868: $mypassword set to 1234
3889: Found username: albumpassword and password: 1234 in cookie. (Maybe #: and name:  too...)
3898: Leaving subroutine: cookieLogin --> return code is 1
2859: Using YaBB Authentication (type 3)
2865: Looking for YaBB 2 file: [/services/webpages/mysite.com/cgi-bin/forum/Members/albumpassword.vars]
2900: Looking for YaBB file: /services/webpages/mysite.com/cgi-bin/forum/Members/albumpassword.dat

*sigh*

[Mike Bobbitt]

Try running album.pl?function=delcookie to kill off all the native album.pl cookies...

[Zippy]

I have run album.pl?function=delcookie

I can navigate between Home, Search, Random, Popular, Upload, and Recent with no problems....

But everytime I upload a photo and then go "album home" The login button shows up and it doesn't know who I am again...

Also when clicking on "create album" on the admin menu, the login button shows up and doesn't know who I am...

[Mike Bobbitt]

You could always disable native cookies by deleting these lines:

Code: [Select]

# Native album.pl cookie login info :D
if ($lastchip=~/^$::albumcookieusername.*/)
{
debug("Found Native album.pl username info: $lastchip",3,__LINE__);
$myusername=$chip;
debug("\$myusername set to $myusername",3,__LINE__);
}

# Native album.pl cookie login info :D
if ($lastchip=~/^$::albumcookiepassword.*/)
{
debug("Found Native album.pl password info: $lastchip",3,__LINE__);
$mypassword=$chip;
debug("\$mypassword set to $mypassword",3,__LINE__);
}
That way it will never fall back to using these (which it shouldn't be anyway since you're trying to use eBlah.) It's not "pretty" but it might help.

[Zippy]

I have deleted those lines....

cleared cookies...

Sign in as admin....

Upload photo

go back home... still knows who I am.. Yeah!

Still can't create new album (that page still shows login button)


Then I sign in as a different member. Album.pl doesn't know who I am....



I have just been to another e-blah forum which is also using album.pl. They are also having problems with authentication with multiple users on the same computer. That forum is just putting up with the problem. There has got to be a way to rectify this problem without having to manually delete cookies everytime or relogging into album.pl.  I have yet to integrate this into my forum as it is not 100% right yet.

Do you have any other suggestions Mike?

[Zippy]

Clear cookies
Login as user 1
everything works fine
Log out of forum
Log back into forum with user "test"
The gallery recognizes the new user
I upload a photo successfully as that new user
I go to gallery home
Now the gallery doesn't recognize me anymore

the following is the debug from the home page:




8870: Cookie Contents Follow:
8884: [eblah_pw] = [1234]
8884: [eblah_un] = [test]
8884: [albumusername] = [test]
8884: [eblah_Logout1] = [$username]
8884: [albumpassword] = [1234]
8887: END OF COOKIE
2773: Entering subroutine: Authenticate
3614: Entering subroutine: cookieLogin
3873: [eblah_pw] = [1234] (u:-p:)
3788: Found e-Blah password info: eblah_pw
3790: $mypassword set to 1234
3873: [eblah_un] = [test] (u:-p:1234)
3780: Found e-Blah username: eblah_un
3782: $myusername set to test
3873: [albumusername] = [test] (u:test-p:1234)
3850: Found generic userid info: test
3852: $myusername set to test
3858: Found Native album.pl username info: albumusername
3860: $myusername set to test
3873: [eblah_Logout1] = [$username] (u:test-p:1234)
3850: Found generic userid info: albumpassword
3852: $myusername set to albumpassword
3873: [albumpassword] = [1234] (u:albumpassword-p:1234)
3842: Found generic password info: 1234
3844: $mypassword set to 1234
3866: Found Native album.pl password info: albumpassword
3868: $mypassword set to 1234
3889: Found username: albumpassword and password: 1234 in cookie. (Maybe #: and name:  too...)
3898: Leaving subroutine: cookieLogin --> return code is 1
2859: Using YaBB Authentication (type 3)
2865: Looking for YaBB 2 file: [/services/webpages/mysite.com/cgi-bin/forum/Members/albumpassword.vars]
2900: Looking for YaBB file: /services/webpages/mysite.com/cgi-bin/forum/Members/albumpassword.dat

[Mike Bobbitt]

Ok, I see what's going on here... Edit album.pl near line 3619 and change it from:

Code: [Select]

# Check to see if the user has a cookie, and log them in with that.
foreach $chip (%::cookie)
{

to:

Code: [Select]

# Check to see if the user has a cookie, and log them in with that.
foreach $chip (%::cookie)
{
# Handle special case for eblah setting $username in the cookie value
if ($lastchip=~/eblah_Logout/i && $::cookie{$lastchip}=~/username/i)
{
next;
}

Give that a shot, if it works I'll merge it into the zip download.


Cheers
Mike

[Warlock]

Read this post: http://dev.bobbitt.ca/forums/index.php?topic=1470.0