Main
Index 		Search
Posts 		Who's
Online 		Log
In

Home: Products: CMS Builder: Plugins & Add-ons:
Links from Membership plugin pages to CMS

 
 


usadomains
Novice

Jul 14, 2011, 5:11 AM

Post #1 of 9 (2424 views)
Shortcut
Links from Membership plugin pages to CMS Can't Post
How do you return the password, to make seamless links between the Membership plugin pages and CMS Builder when it's set to encrypt passwords? We need to make links from Membership pages to the admin. Below is what we thought would work, it returns the username properly, but password is returning the encrypted string instead of the clear text password, so it errors with Invalid Username or Password in CMSB.

<a href="/cmsadmin/admin.php?username=<?php echo htmlspecialchars($CURRENT_USER['username']); ?>&password=<?php echo htmlspecialchars($CURRENT_USER['password']); ?>&action=loginSubmit">Login to Admin</a>

Seems like this used to work on previous versions from other posts I've read, but I don't want to turn off encyption, yet we need to link things to make the clients lives easier.

Thanks in advance!


Dave
Staff / Moderator


Jul 14, 2011, 9:17 AM

Post #2 of 9 (2413 views)
Shortcut
Re: [usadomains] Links from Membership plugin pages to CMS [In reply to] Can't Post
Hi usadomains,

The CMS and the website share the same login session. So if you are logged in to the website as a user you should be able to just link to the CMS and be logged in as that user to the CMS.

Let me know if that works for you.

Dave Edis - Senior Developer
interactivetools.com
 


usadomains
Novice

Jul 14, 2011, 10:54 AM

Post #3 of 9 (2409 views)
Shortcut
Re: [Dave] Links from Membership plugin pages to CMS [In reply to] Can't Post
No, we tried that first and it doesn't work ... a direct link to say ... <a href="/cmsadmin/admin.php">Test Admin Link</a> after logging into a secured page using the membership plugin results in only getting the login page for cmsadmin.


Dave
Staff / Moderator


Jul 14, 2011, 11:47 AM

Post #4 of 9 (2399 views)
Shortcut
Re: [usadomains] Links from Membership plugin pages to CMS [In reply to] Can't Post
Hi usadomains,

Unfortunately there's no way to have the user login with a direct link when password encryption is being used. So the options would be to turn it off or send in a support ticket (and include a link to this thread) and we can further investigate why the direct linking isn't working.

If it's on the same domain it should work. Let me know if you'd like to look into that further.

Dave Edis - Senior Developer
interactivetools.com
 


usadomains
Novice

Jul 14, 2011, 1:03 PM

Post #5 of 9 (2389 views)
Shortcut
Re: [Dave] Links from Membership plugin pages to CMS [In reply to] Can't Post
ok, I see part of the problem.

I login to the site, the below session key is created in server /tmp

cat sess_bef6f64a1efa7ecdb21a12a63fc9925d
isfGwRNINd13wVLVxhIYSvOi_X-TcLSraVvudBPOJNjPbMxVhjDwbfMOcS7eNujdyfg600YKk3huiHRTnb2cU5DR1VtC3pzRpP4elVzPrHZYBWOu48-nnyTrmtWPkKETroot@east1

then click a link to CMSB from the secure page, and the above session becomes 0 bytes.

does this help?

Other clients using other software that use sessions like Joomla, Wordpress or Vbulletin don't have this issue.


(This post was edited by usadomains on Jul 14, 2011, 1:05 PM)


Dave
Staff / Moderator


Jul 14, 2011, 4:54 PM

Post #6 of 9 (2359 views)
Shortcut
Re: [usadomains] Links from Membership plugin pages to CMS [In reply to] Can't Post
Hi usadomains,

Are you using the latest version of Website Membership and CMSB? If you're using the latest version of both let me know and we can debug it for you.

Note that if you need to upgrade Website Membership it's a bit of work as the password reminder has become a password reset feature due to the encryption.

Let me know about the versions and then we can debug it if needed.
Thanks!

Dave Edis - Senior Developer
interactivetools.com
 


usadomains
Novice

Jul 14, 2011, 5:03 PM

Post #7 of 9 (2356 views)
Shortcut
Re: [Dave] Links from Membership plugin pages to CMS [In reply to] Can't Post
yep, it's 2.11 the latest version, and the Memebership plugin was bought and installed in the 24 hours. login details for CSMB and FTP are in the ticket on this.


usadomains
Novice

Jul 14, 2011, 9:21 PM

Post #8 of 9 (2334 views)
Shortcut
Re: [usadomains] Links from Membership plugin pages to CMS [In reply to] Can't Post
After triple checking php settings (all fine) and tailing error messages, we didn't find anything, however we did find an interesting symptom.

First log into the CMS, then in another tab, click any page on the web site itself ... then go back to the other tab, and click a link on the CMS navigation, and your logged out. neat huh?

To be sure it wasn't a browser issue, we tried it on IE8, IE9, and Firefox 5, on different pc's, all with the same result.

We think you have some sessions conflict in your code that's destroying sessions, not really sure. All we know is we need this fixed fairly quickly, so we can get this project completed for our client.


Jason
Staff / Moderator


Jul 18, 2011, 11:00 AM

Post #9 of 9 (2144 views)
Shortcut
Re: [usadomains] Links from Membership plugin pages to CMS [In reply to] Can't Post
Hi,

This issue has now been resolved.

If anyone else is experiencing this issue, try moving the php.ini file that is inside the cmsAdmin/ folder one level up or, if that doesn't work, removing it completely.

The issue here is there was a PHP protection system called Suhosin running on the server and a custom php.ini file that was lessening some of the stricter Suhosin rules (like allowing sessions to be used across multiple folders). Suhosin was finding the cmsAdmin/php.ini file first, and therefore not using the custom php.ini file already present.

Hope this helps. Please let us know if anyone runs into a similar issue where this fix doesn't help.

Thanks
---------------------------------------------------
Jason Sauchuk - Programmer 
interactivetools.com

Hire me! Save time by getting our experts to help with your project.
http://www.interactivetools.com/consulting/