You must have missed the post earlier in the thread by trollix and your search must have missed the thread he referred to:

(HACK) Prevent Firewall login

If the stated goal of XOOPS is to "...create a Content Management System (CMS) for users and developers that installs out of the box offering unparalleled ease of use, support and management." then wouldn't it be great if it worked for users as well... even the odd balls (irony) who choose to run with a firewall?

Actinic (ecommerce software) hit the same problem. They didn't say "most people don't have a problem... sorry you don't like the answer". They fixed it:

ZAP + Norton firewall problem.

If XOOPS is going to be anything other than a CMS for hobby sites it'd better react a little differently to this type of problem.

That's just not right and it completely ignores what several people have posted here.

To repeat what I said: "IE6 + Zone Alarm Pro ...does not cause me any problems at numerous bulletin boards, online banking, image libraries, etc., etc." but I can't use XOOPS with ZAP running in default config.

Quote:

I cannot log in or register at Xoops.org without first disabling the default cookie settings on Zone Alarm Pro 3 ("Block third party cookies" and "Remove private header information"). I'm using WinXP / IE6 with ZAP3. This is obviously a _very_ common config and does not cause me any problems at numerous bulletin boards, online banking, image libraries, etc., etc.

As others have suggested in this thread most people will not adjust / switch off their firewall to login in to a site - even if they do work out what the problem is. I suppose you could write:

PLEASE TURN OFF YOUR FIREWALL TO USE OUR SITE

at the top of the login page... but that sure don't fill me with confidence!

From what I've seen of XOOPS I really like it - but this problem is enough to make me look elsewhere for a CMS.

The hack provided by trollix seems to fix the problem but it's not recommended by XOOPS developers because it's a security risk. Why? Is there no other fix?

Quote:

Thanks, trollix, a useful thread.

I'm surprised by this - it effectively means that anyone running a firewall (most people?) isn't going to be able to register / login in to a XOOPS site without turning off their (default?) firewall settings. I guessed it was my firewall causing problems - most users won't and will just give up assuming 'crap site'.

I know little about PHP / mySQL but I do know the vast majority of sites allow me to register / logon without disabling my firewall.

I was hoping XOOPS was going to be my CMS of choice - but looks like it's not ready for the big time?

I know how to use my firewall, thanks. XOOPS does not appear in the site list - I assume it's identified only by its IP. Why?!

I'm registered at _many_ forums and XOOPS is the first one I've come across that requires me to disable "Block 3rd party cookies" and "Remove private header information" to make it work.

After a bit more playing - I need to run ZAP3 with "Block 3rd party cookies" unchecked to be able to login to my XOOPS account.

This doesn't seem too clever. Any developers like to comment?

Thanks.

Hi

I'm unable to login to my account with ZoneAlarm Pro 3 running (I was also unable to register with it running). I've not experienced this with any other sites.

Any ideas?

Thanks

David.