Author |
Message |
12/11/2005 18:39:41
|
stevendude
Beginner
Joined: 03/08/2004 05:58:40
Messages: 26
Location: CA
Offline
|
Hi. I tried to log in as admin and could not. I ran your password reset script to reset the password to test and 123 and it said it ran fine. But I still can not log in as test and 123. Can anyone please help?
The database says
test 773359240eb9a1d9
http://www.obsessed-with-music.com/koobtseug/admin.php
Thank, I appreciate it.
stevendude
|
|
12/11/2005 18:47:53
|
Carbonize
Master
Joined: 12/06/2003 19:26:08
Messages: 4292
Location: Bristol, UK
Offline
|
I could unpatch the login exploit since you are running 2.2 but not advisable. You can reset the username and password via phpMyAdmin.
Select the book_auth table by clicking it in the left pane. Click Browse tab in right window.Click the edit button (looks like a pencil). You will now see your username. Type in a new password and select Password from the list of available functions on the password row.
|
Carbonize
I am not the maker of the Advanced Guestbook
get Lazarus |
|
12/11/2005 18:53:02
|
stevendude
Beginner
Joined: 03/08/2004 05:58:40
Messages: 26
Location: CA
Offline
|
Thanks. I just tried that. I went into the record and put 123 as password. I selected 'password' from the drop-down and clicked to update the record. It now says
1 test 773359240eb9a1d9 472513661ea704ec07b0e82cfe596b1b 20051112105301
But when I try to log in with test and 123 it does not let me.
Thanks.
stevendude
|
|
12/11/2005 19:17:25
|
Auron
Expert
Joined: 23/06/2003 22:02:17
Messages: 1053
Offline
|
It looks like its got 3 passwords encoded in the field now.
Clear the field totally then try what Carb' said above again.
|
Visit my site @ www.ragnaru.com
Adv. Poll Install Guide NOW BACK ONLINE! (And also rather out of date I would of thought) |
|
12/11/2005 19:25:59
|
stevendude
Beginner
Joined: 03/08/2004 05:58:40
Messages: 26
Location: CA
Offline
|
That's not three passwords, I dont think. Those are the other two fields in the record, session and lastvisit. Anyway. I just used PHP MyAdmin to set it to blank with type password, and then to 123 with type password. It still won't let me log in. This is weird.
The whole record is:
1 test 773359240eb9a1d9 472513661ea704ec07b0e82cfe596b1b 20051112112448
Other ideas?
|
|
12/11/2005 19:31:14
|
Carbonize
Master
Joined: 12/06/2003 19:26:08
Messages: 4292
Location: Bristol, UK
Offline
|
stevendude wrote:The whole record is:
1 test 773359240eb9a1d9 472513661ea704ec07b0e82cfe596b1b 20051112112448
UID = 1
Username = test
Password = 773359240eb9a1d9
sessionid = 472513661ea704ec07b0e82cfe596b1b
Last login = 20051112112448.
Ftp into your web space and check the last modified date on the lib files.
|
Carbonize
I am not the maker of the Advanced Guestbook
get Lazarus |
|
12/11/2005 19:36:24
|
stevendude
Beginner
Joined: 03/08/2004 05:58:40
Messages: 26
Location: CA
Offline
|
Nothing in there with a later date than March 2005
????????????????????????????
What is going on here?????
|
|
12/11/2005 19:37:32
|
Carbonize
Master
Joined: 12/06/2003 19:26:08
Messages: 4292
Location: Bristol, UK
Offline
|
Has your host updated anything recently such as MySQL ?
|
Carbonize
I am not the maker of the Advanced Guestbook
get Lazarus |
|
12/11/2005 19:45:53
|
Auron
Expert
Joined: 23/06/2003 22:02:17
Messages: 1053
Offline
|
Carbonize wrote:
stevendude wrote:The whole record is:
1 test 773359240eb9a1d9 472513661ea704ec07b0e82cfe596b1b 20051112112448
UID = 1
Username = test
Password = 773359240eb9a1d9
sessionid = 472513661ea704ec07b0e82cfe596b1b
Last login = 20051112112448.
Ftp into your web space and check the last modified date on the lib files.
my bad ^^;;
|
Visit my site @ www.ragnaru.com
Adv. Poll Install Guide NOW BACK ONLINE! (And also rather out of date I would of thought) |
|
12/11/2005 19:55:05
|
stevendude
Beginner
Joined: 03/08/2004 05:58:40
Messages: 26
Location: CA
Offline
|
Carbonize wrote:Has your host updated anything recently such as MySQL ?
I don't think so, not that I know of. I can still view the guestbook and my phpBB still works...
??????????
|
|
12/11/2005 20:01:16
|
stevendude
Beginner
Joined: 03/08/2004 05:58:40
Messages: 26
Location: CA
Offline
|
Now I tried running the 'reset.php' script again and it didn't run right either this time. I got 'Could not reset the username and password because: ' and no error message.
|
|
12/11/2005 20:09:22
|
Carbonize
Master
Joined: 12/06/2003 19:26:08
Messages: 4292
Location: Bristol, UK
Offline
|
This has been happening a lot for some reason. Let me check some thing but I cannot understand why it's not logging you in.
|
Carbonize
I am not the maker of the Advanced Guestbook
get Lazarus |
|
12/11/2005 20:13:59
|
Carbonize
Master
Joined: 12/06/2003 19:26:08
Messages: 4292
Location: Bristol, UK
Offline
|
Anychance I can have phpMyAdmin access?
|
Carbonize
I am not the maker of the Advanced Guestbook
get Lazarus |
|
12/11/2005 20:18:36
|
stevendude
Beginner
Joined: 03/08/2004 05:58:40
Messages: 26
Location: CA
Offline
|
Is this something I could check?
|
|
12/11/2005 20:20:41
|
Carbonize
Master
Joined: 12/06/2003 19:26:08
Messages: 4292
Location: Bristol, UK
Offline
|
I just wanted to have a look. See if I can't get it working. No biggy.
|
Carbonize
I am not the maker of the Advanced Guestbook
get Lazarus |
|
|