close ad
 
Important WebAssist Announcement
open ad
View Menu

Technical Support Forums

Free, outstanding support from WebAssist and your colleagues

 
› WebAssist Forums › Data Bridge › SecurityAssist › Log In Failure
Sign in to rate this thread
rating

Log In Failure

Thread began 4/28/2011 6:03 am by gpaul | Last modified 4/28/2011 10:54 am by Jason Byrnes | 3243 views | 9 replies |

4/28/2011 6:03 am  |  #1 gpaul

Log In Failure

I have a log in that does not work, upon entering app_uname (username) and app_pw (password), the input data is removed and it appears the page reloads. The failure redirect is set to another page, however it does not take me there.

I have uploaded the HelperGroupsRulesPHP.php and it has the rule included (I have another log in on the site that works).

The connection seems to be correct in that I am able to insert into the DB and the connection files are the same.

This is from appraiser_LogIn.php

if($_SERVER["REQUEST_METHOD"] == "POST"){
$WA_Auth_Parameter = array(
"connection" => $assess_remote,
"database" => $database_assess,
"tableName" => "appraiser",
"columns" => explode($WA_Auth_Separator,"app_uname".$WA_Auth_Separator."app_pw"),
"columnValues" => explode($WA_Auth_Separator,"".((isset($_POST["username"]))?$_POST["username"]:"") ."".$WA_Auth_Separator."".((isset($_POST["userpassword"]))?$_POST["userpassword"]:"") .""),
"columnTypes" => explode($WA_Auth_Separator,"text".$WA_Auth_Separator."text"),
"sessionColumns" => explode($WA_Auth_Separator,"app_id"),
"sessionNames" => explode($WA_Auth_Separator,"app_id"),
"successRedirect" => "appraiser_Profile.php",
"failRedirect" => "appraiser_EmailPW.php",
"gotoPreviousURL" => TRUE,
"keepQueryString" => TRUE
);

WA_AuthenticateUser($WA_Auth_Parameter);
}
?>
<?php
if((((isset($_SESSION["app_id"]) && $_SESSION["app_id"] != "")?"LoggedIn":"") == "")&&(((isset($_COOKIE["AutoLoginUN"]))?$_COOKIE["AutoLoginUN"]:"") != "")&&(((isset($_COOKIE["AutoLoginPWD"]))?$_COOKIE["AutoLoginPWD"]:"") != "")){
$WA_Auth_Parameter = array(
"connection" => $assess_remote,
"database" => $database_assess,
"tableName" => "appraiser",
"columns" => explode($WA_Auth_Separator,"app_uname".$WA_Auth_Separator."app_pw"),
"columnValues" => explode($WA_Auth_Separator,"".((isset($_COOKIE["AutoLoginUN"]))?$_COOKIE["AutoLoginUN"]:"") ."".$WA_Auth_Separator."".((isset($_COOKIE["AutoLoginPWD"]))?$_COOKIE["AutoLoginPWD"]:"") .""),
"columnTypes" => explode($WA_Auth_Separator,"text".$WA_Auth_Separator."text"),
"sessionColumns" => explode($WA_Auth_Separator,"app_id"),
"sessionNames" => explode($WA_Auth_Separator,"app_id"),
"successRedirect" => "appraiser_Profile.php",
"failRedirect" => "index.php",
"gotoPreviousURL" => TRUE,
"keepQueryString" => TRUE
);

WA_AuthenticateUser($WA_Auth_Parameter);
}


Is there any other information that would be helpful in tracking this down?

Thank you

Gary

Sign in to reply to this post

4/28/2011 8:10 am  |  #2 Jason ByrnesWebAssist

sounds like a php error is occurring that is preventing the redirect.


add the following code at line 1:
[php<?php
error_reporting(E_ALL);
ini_set('display_errors','on');
?>[/php]

post back a copy of your login page in a zip archive and any errors that show after testing.

Sign in to reply to this post

4/28/2011 8:25 am  |  #3 gpaul

Jason

Thank you for your reply, nothing happened when I inserted

<?php
error_reporting(E_ALL);
ini_set('display_errors','on');
?>

However, the url then reflected this:

law_firm_LogIn.php?accesscheck=%2Fappraiser_Profile.php%3Faccesscheck%3D%2Fappraiser_LogIn.php%3F%26accesscheck%3D%252Fappraiser_Profile.php%253Faccesscheck%253D%25252Fappraiser_LogIn.php%25253F

Find attached the log in page.

Thank you for your help.

Gary

Attached Files
appraiser_LogIn.zip
Sign in to reply to this post

4/28/2011 8:59 am  |  #4 Jason ByrnesWebAssist

Hmmmm, in the login page, add the following code just before the </body> tag:

php:
<pre><?php var_dump($_SESSION); ?></pre>




and send a copy of the profile page and HelperGroupsRulesPHP.php page in a zip archive.

Sign in to reply to this post

4/28/2011 9:07 am  |  #5 gpaul

Jason

I have attached the two files as well as the appraiser_LogIn.php page.

Again nothing happened when I added the error reporting script.

Thank you

Gary

Attached Files
public_html.zip
Sign in to reply to this post

4/28/2011 9:43 am  |  #6 Jason ByrnesWebAssist

I dont believe the changes I am asking you to make on the login page are making it up to the server.

If they where, i should see:
array (0) { }

bellow the footer on the login page but I am not.

To double check this, add today's date:
4/28/2011

just after the opening <body> tag. this visual change to the page will help ensure the changes are making it up to the server.

Sign in to reply to this post

4/28/2011 9:57 am  |  #7 gpaul

I think that you are on to something, I put the date in, uploaded the page, it showed that the update had been made (the file appraiser_LogIn.php reflected the new modified time), however the changes did not show in the browser.

When I enter the page, it is

appraiser_LogIn.php

After I enter the log in information, the url is now

law_firm_LogIn.php?accesscheck=%2Fappraiser_Profile.php%3Faccesscheck%3D%2Fappraiser_LogIn.php%3F%26accesscheck%3D%252Fappraiser_Profile.php%253Faccesscheck%253D%25252Fappraiser_LogIn.php%25253F

It appears there is a redirect to law_firm_LogIn.php, which is the other log in page I have on the site.

When I do an incorrect log in on the law_firm_LogIn.php page, the url does not change....hope that helps.

What should I try next?

Gary

Sign in to reply to this post

4/28/2011 10:07 am  |  #8 Jason ByrnesWebAssist

change this code on the login page

php:
<?php

if (!WA_Auth_RulePasses("Logged in to appraiser")){

    WA_Auth_RestrictAccess("appraiser_Profile.php");

}

?>



to:

php:
<?php

if (WA_Auth_RulePasses("Logged in to appraiser")){

    WA_Auth_RestrictAccess("appraiser_Profile.php");

}

?>




and on the profile page, change:

php:
<?php

if (!WA_Auth_RulePasses("Logged in to appraiser")){

    WA_Auth_RestrictAccess("law_firm_LogIn.php");

}

?>



to:

php:
<?php

if (!WA_Auth_RulePasses("Logged in to appraiser")){

    WA_Auth_RestrictAccess("appraiser_LogIn.php");

}

?>
Sign in to reply to this post

4/28/2011 10:46 am  |  #9 gpaul

Jason

Thank you for your help, that seems to have solved it.

Gary

Sign in to reply to this post

4/28/2011 10:54 am  |  #10 Jason ByrnesWebAssist

glad to hear it is working.

Sign in to reply to this post
loading

Build websites with a little help from your friends

Your friends over here at WebAssist! These Dreamweaver extensions will assist you in building unlimited, custom websites.

Build websites from already-built web applications

These out-of-the-box solutions provide you proven, tested applications that can be up and running now.  Build a store, a gallery, or a web-based email solution.

Want your website pre-built and hosted?

Everything else!

Close Windowclose

Rate your experience or provide feedback on this page

Account or customer service questions?
Please user our contact form.

Need technical support?
Please visit support to ask a question

Content

rating

Layout

rating

Ease of use

rating

security code refresh image

We do not respond to comments submitted from this page directly, but we do read and analyze any feedback and will use it to help make your experience better in the future.

go to page top
Close Windowclose

We were unable to retrieve the attached file

Close Windowclose

Attach and remove files

add attachmentAdd attachment
Close Windowclose

Enter the URL you would like to link to in your post

Close Windowclose

This is how you use right click RTF editing

Enable right click RTF editing option allows you to add html markup into your tutorial such as images, bulleted lists, files and more...

-- click to close --

Uploading file...