Latest posts for the topic "I can't login in as admin"

I can't login in as admin

Anonymous — GMT

Hi,

i have a problem. I can't login as admin in my guestbook.
Everything works for the visitors. I read in the install notes that the default user and passwd is: test, 123. But it is'n working...
(I get: "Invalid username or password. Please try again")

Is there anyone who can help me to get my username and passwd????

Jam'n — GMT

Try reseting the password

You will need PHPadmin for this.

[Method 1]
Select the Guestbook database.
Select book_auth.
Now choose Browse.
You now see the admin username and password.
Select edit.
Now paste Code:

[code]773359240eb9a1d9 [/code]

in the password field and click “GO”.

This will reset your account to:

Your admin name and the password will be: 123

Or do it like this.

[Method 2]
Select the Guestbook database
Now choose on the right side of screen select SQL
Now insert in the Data Entry Field the following lines:

[code]
delete from book_auth;
INSERT INTO book_auth VALUES (1, 'test', '773359240eb9a1d9', '7d8b85294e2e060b83f596a4fc5561ce', 1058460506);[/code]

And click "GO"

This will reset your account to:

User name: test
Password: 123

It is still not working...

Anonymous — GMT

I did what you said and it is still not working.
And i checkt my sql database, it's all there.
Even that user 'test'.

Do you know anything else?

Jam'n — GMT

The only option I have left is delete all the cookies and temporary internet files and try again.

Do you have a link so I could give it a try?

Anonymous — GMT

I changed my guestbook in the same as this site uses (this forum).
So my problem is solved, but thanks anyway for your help...

Same problem, can't log-in

BrendaJ — GMT

Hi,

I installed advanced GB 2.2 for a friend and it worked fine for months, now he (nor I) can login as admin, although I myself was able to before.

I tried both methods as you described and I still can't login.
Any thoughts?

I'm willing to try upgrading his gb to the new version but don't want to lose his entries.

I look forward to your response. Thanks.

Brenda

Jam'n — GMT

Hello BrendaJ

I don't have any thoughts at the moment, but the upgrade should go like this.

First: are you sure you have version 2.2, the one with the smilies.
If you have the right version, then you can do this.

You will have to use PHPMYADMIN or something similar. Phpmyadmin is what most web server hosts use for their clients to access the database.

Replace all files (with the guestbook 2.3.1) and update your database with the SQL file.

[code]# MySQL dump 8.16
#
# Host: localhost Database: gb23
#--------------------------------------------------------
# Server version 3.23.42

#
# Table structure for table 'book_pics'
#

CREATE TABLE book_pics (
msg_id int(11) NOT NULL default '0',
book_id int(11) NOT NULL default '0',
p_filename varchar(100) NOT NULL default '',
p_size int(11) unsigned NOT NULL default '0',
width int(11) unsigned NOT NULL default '0',
height int(11) unsigned NOT NULL default '0',
KEY msg_id (msg_id),
KEY book_id (book_id)
) TYPE=MyISAM;

ALTER TABLE `book_config` ADD `thumbnail` SMALLINT(1) NOT NULL, ADD `thumb_min_fsize` INT(10) NOT NULL; [/code]

Ps. don't forget ta back up your database first. Just in case :)

Jam'n — GMT

Here are some pictures

Here is a tutorial how to import the tables to upgrade your guestbook 2.2 to version 2.3.1
I assume you already have phpMyAdmin and advance guestbook installed and running.

[img]http://www.procaz.net/forum/advanced_guestbook/pictures/phpmyadmin_upgrade/gb22_1.jpg[/img]

Login to phpMyAdmin.

[img]http://www.procaz.net/forum/advanced_guestbook/pictures/phpmyadmin_upgrade/gb22_2.jpg[/img]

And choose your guestbook database.

[img]http://www.procaz.net/forum/advanced_guestbook/pictures/phpmyadmin_upgrade/gb22_3.jpg[/img]

Now select on the right window SQL and browse to the file with the upgrade or paste it into the window and press GO.

[img]http://www.procaz.net/forum/advanced_guestbook/pictures/phpmyadmin_upgrade/gb22_4.jpg[/img]

You should now see the message that the SQL-query executed successfully.

[img]http://www.procaz.net/forum/advanced_guestbook/pictures/phpmyadmin_upgrade/gb22_5.jpg[/img]

You just need to copy all the files of the new guestbook and your done.

[img]http://www.procaz.net/forum/advanced_guestbook/pictures/phpmyadmin_upgrade/gb22_6.jpg[/img]

BrendaJ — GMT

Thank you for your reply and the time it took to do so!

Well, I'm not so sure it is version 2.2 with smilies, it says version 2.2 but there are no smilies. Here is the url: http://www.uspatriotsmc.com/guestbook/

I have this guestbook installed at my own site as well and I sometimes have to enter my username and password several times for it to let me in.

If I can't upgrade this version I may just install the new version and manually transfer the posts.

I really appreciate your help

Brenda

Jam'n — GMT

Hi Brenda,

I just looked at your version and you have indeed the 2.2 version.
You can see the smilies when you click on show legend.
So you can just upgrade, but make sure to backup first.
Just incase.

Good luck.

help does not help

Digital Beat — GMT

I also forget my password, tried everything and still it does not reset. What I am doing wrong?

Many Thanks!

jaliam — GMT

You just solved my problem, Jam'n! Thank you very much. :D

Anonymous — GMT

ok thanks, it works now

Guestbook username & password

Anonymous — GMT

Iam also havin problem, forgot my username and password, which file that hold username and password, so that I can see it?, thanks for any help.

BrendaJ — GMT

Jam'n,

I really appreciate your help, but I'm a little confused about the upgrade.
Do you ever upgrade for a fee? How much would you charge to upgrade my site and my friend's with the newest version?
Feel free to email me.

Thanks!
Brenda

Anonymous — GMT

Was ist denn das Problem? Vielleicht kann ich Dir ja helfen!

Jam'n — GMT

Hi BrendaJ.

I'm willing to help, but the PM has been disabled on this board.
You can reach me at "email removed"

Just put Guestbook in the subject and it will be filtered

Anonymous — GMT

I did everything mentioned here, but i really cannot login with test and 123

1 test 773359240eb9a1d9 7d8b85294e2e060b83f596a4fc5561ce 1058460506

phpbb-fan — GMT

above post is mine

Anonymous — GMT

Did anyone figure this out? By this I mean having a working guestbook up for a while and all of a sudden not being able to login as admin. I tried resetting the password and it seems the user/pass works but as soon as I try to do anything I am back at the login form. I am running 2.3.1 and it was installed as 2.3.1 not updated.
Thanks.

Anonymous — GMT

thanks Jam'n..... i get back the password

Jam'n — GMT

Hi Guest,

Your Welcome.

As of the problems people have with their login, I sounds if the problem lies in a corrupt "session" in the "book_auth" from the database.
However, to be sure I would have to have full access to a guestbook with this problem.
On the other hand, maybe somebody else could try to look at it and fix the "session" and tell us if this is indeed the problem.

fixed mine

Anonymous — GMT

I fixed the same problem with 2.3.1 by dropping book_auth and re-creating it using the script provided. If you notice, there are some differences with the older version. Hope this helps.

[code]CREATE TABLE book_auth (
ID smallint(5) NOT NULL auto_increment,
username varchar(60) NOT NULL default '',
password varchar(60) NOT NULL default '',
session varchar(32) NOT NULL default '',
last_visit int(11) NOT NULL,
PRIMARY KEY (ID)
) TYPE=MyISAM;

#
# Dumping data for table 'book_auth'
#

INSERT INTO book_auth VALUES (1,'test','773359240eb9a1d9','80c1b50318676c8f324c985b94ac780a',1013100791);[/code]

Jam'n — GMT

Hi Guest,

Thanks for trying it out and telling us about your findings.

phpbb-fan — GMT

hmm.. is the password still 123 in that script?

Anonymous — GMT

Yes

Anonymous — GMT

and the username is Test

phpbb-fan — GMT

well.. i've dropped the book_auth table, recreated it with the script provided by Geust, but I still can't login as a admin by using test and 123

Anonymous — GMT

http://proxy2.de/forum/viewtopic.php?t=1981&start=17

phpbb-fan — GMT

still no luck..

[quote]Invalid username or password. Please try again.[/quote]

the changes and additions in that link were already in my database..

Anonymous — GMT

What version do you have? The dropping and re-creating of book_auth applies to version 2.3.1 so i hope that didn't mess you up.

Run a query against your book_auth table and post it here if you don't mind. It should look something like this.
[code]
ID username PASSWORD session last_visit
1 test 773359240eb9a1d9 80c1b50318676c8f324c985b94ac780a 1013100791[/code]

phpbb-fan — GMT

i am using version 2.3.1

this is what i have in book_auth:

[quote]DROP TABLE IF EXISTS book_auth;
CREATE TABLE book_auth (
ID smallint(5) NOT NULL auto_increment,
username varchar(60) NOT NULL default '',
password varchar(60) NOT NULL default '',
session varchar(32) NOT NULL default '',
last_visit int(11) NOT NULL default '0',
PRIMARY KEY (ID)
) TYPE=MyISAM;

INSERT INTO book_auth (ID, username, password, session, last_visit) VALUES (1, 'test', '773359240eb9a1d9', 'cd2c6d5e457641991d52da8fb6d87c08', 1013100791);[/quote]

I did a clean install.. but I still can't login with test and 123

Admin login returns to login menu

Anonymous — GMT

I, too, have a problem since upgrading (old GB got hacked, found upgrade info here). I login and go to the admin screen, and as soon as I click on an admin link it tosses me back to the login screen again.

Thoughts?

alsplace@pobox.com

Anonymous — GMT

I also have had this problem, even after reading these forums and stepping through the upgrade carefully.

One thing I didn't do was keep a copy of my old 2.2 \lib\session.class.php file....a pity. I hear it can fix the problem.

Anyway I found another way that has worked for me. It might break something else and perhaps the gurus here can let us know the dangers of this approach but anyway here is what I did.

The problem is one of sessions (aren't they always) and the check against the sessionID seems to fail throwing you back to login. I figured OK then, lets make it work. So in session.class.php

find starting at line 24
[code] function isValidSession($session,$user_id) {
$this->query("SELECT session, last_visit from ".$this->table['auth']." WHERE session='$session' and ID='$user_id'");
$row = $this->fetch_array($this->result);
if ($row) {
return ($this->expire + $row['last_visit'] > time()) ? $row["session"] : false;
} else {
return false;[/code]

change to
[code] function isValidSession($session,$user_id) {
$this->query("SELECT session, last_visit from ".$this->table['auth']." WHERE session='$session' and ID='$user_id'");
$row = $this->fetch_array($this->result);
if ($row) {
[b]return ($this->expire + $row['last_visit'] > time()) ? $row["session"] : true;[/b]
} else {
return false;[/code]

It looks like this IF clause is evaluating to false either way. So by making the first one true I can now admin my 2.3.1 guestbook.

I am happy that this works, but just not sure if it creates a vulnerability, so comments are welcome.

My next issue is that 'last_visit' in the AUTH table is not updating.

ReliableSol — GMT

Sorry, I wasn't logged in for that last post. The changed line is the one with the '[b][/b]' tags around it. They didn't come out in the display.

ReliableSol — GMT

OK, update.
I have undone the change to session.class.php. While it worked it has now proved to be unnecessary.

My last_visit problem was the key. Since this was not updating properly it was always more than 7200 seconds since the last login and this is why you are logged out and thrown back to the login prompt.

The reason: I believe in 2.2 in table 'Auth' last_visit was capitalized to 'LAST_VISIT'. It was also a timestamp field. And on mine it was allowed to be null.

In 2.3.1 session.class.php down at lines 48, 49 creates a $timestamp variable. However the MYSQL timestamp data type is peculiar. From the MySQL manual (comments)
[quote]it is misleading in that the 'timestamp' field type in mysql holds a datetime value that updates itself unless you explicitly set it[/quote]

Note that a datetime format is YYYY-MM_DD HH:MM:SS however our $timestamp variable is only in seconds with 10 or 11 digits. If you do the full install and run guestbook.sql this gets set correctly. However with an upgrade you only run the upgrade.sql which just set up the images table and doesn't change the 'auth' table. This is why people have posted the sql files in the forums. These .sql files set 'auth' to INT (11) and 'last_visit' to lower case, which allows the field to be written to when you login and logout. Therefore the time is updated and session check doesn't throw you back to the login script.

So if you are having trouble logging in have a close look at your database with something like PHPMYADMIN or better yet MySQL-Front or MySQLCC and make sure the fields are labelled correctly, and the properties are set to either integer(preferred) or varchar.

Anonymous — GMT

i have tried every fix given in this forum and i still cant get it to let me login as admin ..tho if i delete the password in book_auth i can login with just test ..it has me baffled

Anonymous — GMT

i wonder if it has something to do the fact im running freebsd 5.1 cause when i try the fix on a linux box it works..any thoughts?

How I fixed it...

BadBoo — GMT

I did an upgrade from 2.2. to 2.31.
I had the problem of logging in, and then being asked to login again whenever I clicked on anything from the admin menu.

This s what I did to solve the problem after deleting and uploading the new 2.31 files (with appropriate changed to config.inc.php)

The fix for me was Kerry's post. Since he isn't real clear in his explanation, I am writing the fix he describes:

Go to MyPHPAdmin, and pull up the table:
book_auth
by clicking on it on the leftmost column.

Now place a check mark in the box to the left of LAST_VISIT
Now click on the icon to the right (7 columns to the right) that looks like a piece of paper with a pencil over it. The mouseover will say 'change'

change FIELD from LAST_VISIT to last_visit
(just change it to lower case)

the second column should be:
INT

the third column should be:
11

the fourth column (attributes) should be empty, (blank, nothing in it.)

the 5th coulmn (NULL) should be 'not null'

the 6th column should be:
0

The 8th and final column should be blank (empty, nothing in it)

Now over to the left, and down under the FIELD column is a 'save' button. Click on Save.
This fixed two of my guestbook that I had upgraded from 2.2. to 2.31, and run the upgrade.sql script on.

Hope it helps, and thanks for being smart Kerry!

Carbonize — GMT

Yup this is one of the things my install.php file wil do. It will also add the extra tables needed by 2.3.1.

JTD — GMT

This is for anyone wanting a sessions class php file. From advanced guestbook 2.2

[quote][color="green"] /**
* ----------------------------------------------
* Advanced Guestbook 2.2 (PHP/MySQL)
* Copyright (c)2001 Chi Kien Uong
* URL: http://www.proxy2.de
* ----------------------------------------------
*/

class gb_session extends gbook_sql {

var $expire = 7200;
var $include_path;
var $table;

function gb_session($path='') {
global $GB_TBL;
$this->table =& $GB_TBL;
$this->gbook_sql();
$this->connect();
$this->include_path = $path;
}

function isValidSession($session,$user_id) {
$this->query("SELECT session, LAST_VISIT from ".$this->table['auth']." WHERE session='$session' and ID='$user_id'");
$row = $this->fetch_array($this->result);
if ($row) {
$year = substr($row["LAST_VISIT"],0,4);
$date = substr($row["LAST_VISIT"],4,10);
$date_strg = chunk_split($date,2,"-");
list($month,$day,$hour,$minute,$second) = explode("-",$date_strg);
$tstamp = mktime($hour,$minute,$second,$month,$day,$year);
return ($this->expire + $tstamp > time()) ? $row["session"] : false;
} else {
return false;
}
}

function isValidUser($user_id) {
$this->query("SELECT username FROM ".$this->table['auth']." WHERE ID='$user_id'");
$this->fetch_array($this->result);
return ($this->record) ? true : false;
}

function changePass($user_id,$new_password) {
$this->query("UPDATE ".$this->table['auth']." SET password=PASSWORD('$new_password') WHERE ID='$user_id'");
return ($this->record) ? true : false;
}

function generateNewSessionID($user_id) {
srand((double)microtime()*1000000);
$session = md5 (uniqid (rand()));
$this->query("UPDATE ".$this->table['auth']." SET session='$session' WHERE ID='$user_id'");
return $session;
}

function checkPass($username,$password) {
$this->query("SELECT ID FROM ".$this->table['auth']." WHERE username='$username' and password=PASSWORD('$password')");
$this->fetch_array($this->result);
return ($this->record) ? $this->record["ID"] : false;
}

function checkSessionID() {
global $username, $password, $session, $uid;
if (isset($session) && isset($uid)) {
return ($this->isValidSession($session,$uid)) ? array("session" => "$session", "uid" => "$uid") : false;
} elseif (isset($username) && isset($password)) {
if (get_magic_quotes_gpc()) {
$username = stripslashes($username);
$password = stripslashes($password);
}
$ID = $this->checkPass($username,$password);
if ($ID) {
$session = $this->generateNewSessionID($ID);
return array("session" => "$session", "uid" => "$ID");
} else {
return false;
}

} else {
return false;
}

}

}

?>[/color][/quote]

Carbonize — GMT

For anybody wanting the 2.2 session.class.php file with the exploit fixed
[code] /**
* ----------------------------------------------
* Advanced Guestbook 2.2 (PHP/MySQL)
* Copyright (c)2001 Chi Kien Uong
* URL: http://www.proxy2.de
* ----------------------------------------------
*/

class gb_session extends gbook_sql {

var $expire = 7200;
var $include_path;
var $table;

function gb_session($path='') {
global $GB_TBL;
$this->table =& $GB_TBL;
$this->gbook_sql();
$this->connect();
$this->include_path = $path;
}

function isValidSession($session,$user_id) {
$this->query("SELECT session, LAST_VISIT from ".$this->table['auth']." WHERE session='$session' and ID='$user_id'");
$row = $this->fetch_array($this->result);
if ($row) {
$year = substr($row["LAST_VISIT"],0,4);
$date = substr($row["LAST_VISIT"],4,10);
$date_strg = chunk_split($date,2,"-");
list($month,$day,$hour,$minute,$second) = explode("-",$date_strg);
$tstamp = mktime($hour,$minute,$second,$month,$day,$year);
return ($this->expire + $tstamp > time()) ? $row["session"] : false;
} else {
return false;
}
}

function isValidUser($user_id) {
$this->query("SELECT username FROM ".$this->table['auth']." WHERE ID='$user_id'");
$this->fetch_array($this->result);
return ($this->record) ? true : false;
}

function changePass($user_id,$new_password) {
$this->query("UPDATE ".$this->table['auth']." SET password=PASSWORD('$new_password') WHERE ID='$user_id'");
return ($this->record) ? true : false;
}

function generateNewSessionID($user_id) {
srand((double)microtime()*1000000);
$session = md5 (uniqid (rand()));
$this->query("UPDATE ".$this->table['auth']." SET session='$session' WHERE ID='$user_id'");
return $session;
}

function checkPass($username,$password) {
$this->query("SELECT ID FROM ".$this->table['auth']." WHERE username='$username' and password=PASSWORD('$password')");
$this->fetch_array($this->result);
return ($this->record) ? $this->record["ID"] : false;
}

function checkSessionID() {
global $username, $password, $session, $uid;
if (isset($session) && isset($uid)) {
return ($this->isValidSession($session,$uid)) ? array("session" => "$session", "uid" => "$uid") : false;
} elseif (isset($username) && isset($password)) {
if (!get_magic_quotes_gpc()) {
$username = addslashes($username);
$password = addslashes($password);
}
$ID = $this->checkPass($username,$password);
if ($ID) {
$session = $this->generateNewSessionID($ID);
return array("session" => "$session", "uid" => "$ID");
} else {
return false;
}

} else {
return false;
}

}

}

?>[/code]

How?

Anonymous — GMT

Hi, i try to do this but i dont understand hów to do it, I tried but didnt find the right way can you help me more. Please.
[quote="Jam'n"]Try reseting the password

You will need PHPadmin for this.

[Method 1]
Select the Guestbook database.
Select book_auth.
Now choose Browse.
You now see the admin username and password.
Select edit.
Now paste Code:

[code]773359240eb9a1d9 [/code]

in the password field and click “GO”.

This will reset your account to:

Your admin name and the password will be: 123

Or do it like this.

[Method 2]
Select the Guestbook database
Now choose on the right side of screen select SQL
Now insert in the Data Entry Field the following lines:

[code]
delete from book_auth;
INSERT INTO book_auth VALUES (1, 'test', '773359240eb9a1d9', '7d8b85294e2e060b83f596a4fc5561ce', 1058460506);[/code]

And click "GO"

This will reset your account to:

User name: test
Password: 123[/quote]

zoso37ba — GMT

I forgot my password and I tried these instructions to reset it but I can't locate the book_auth file? Where is it?

Thanks for your help!

Carbonize — GMT

Use this http://www.carbonize.co.uk/reset.zip

Carbonize — GMT

Upgrading from 2.2 to 2.3.3 is simple but at present you will lose any images that users uploaded as I have not had time to write a script to add them to the updated database. Upgrading is simply a question of making a backup of your current guestbook files/database, replacing the files on the server with the new guestbook files (remembering to edit config.inc.php) then running the upgrade script I wrote. If needs be I can do it for you.

Resetting a Password

foxygoddess — GMT

[quote="Anonymous"]i have tried every fix given in this forum and i still cant get it to let me login as admin ..tho if i delete the password in book_auth i can login with just test ..it has me baffled[/quote]

After trying everything else, I tried this - and it worked for me, too. I then went in and changed the password to something else (instead of nothing) and lo and behold, my guestbook lives again. Thank you!

~ Foxy

Re: Resetting a Password

frank_b — GMT

[quote="foxygoddess"][quote="Anonymous"]i have tried every fix given in this forum and i still cant get it to let me login as admin ..tho if i delete the password in book_auth i can login with just test ..it has me baffled[/quote]

After trying everything else, I tried this - and it worked for me, too. I then went in and changed the password to something else (instead of nothing) and lo and behold, my guestbook lives again. Thank you!

~ Foxy[/quote]

I am running 2.3.4 and for some reasen could not login

Removed the password and could login with no password, strange because I was sure to use the right combo.

This did the trick anyhow, thanks

Grace — GMT

i CAN'T LOGING TO ADMINISTRATION PANEL AdvancedGuestBook,
and I don't understand what must I do?...
Allways write unvalide password or username?...
I don't understand what must I do?...
help me please....

Carbonize — GMT

http://lazarus.carbonize.co.uk look in the FAQ