xoops forums

GPboarder

Friend of XOOPS
Posted on: 2008/10/30 20:34
GPboarder
GPboarder (Show more)
Friend of XOOPS
Posts: 248
Since: 2006/10/6
#1

Using 2.3.1 I have a problem with user login - goes to endless loop

On my site, logging in is no problem if you get it right. The "you don't have permission " message is an endless loop if a mistake is made.
Works fine in testing.
What file(s) must be missing/corrupt in production to be causing this?
Optimism is the mother of disappointment.

melgior

Just popping in
Posted on: 2008/10/31 0:46
melgior
melgior (Show more)
Just popping in
Posts: 3
Since: 2005/11/27
#2

Re: Using 2.3.1 I have a problem with user login - goes to endless loop

I had the same problem. Please check if a not-logged-in user has access to the profile module, because otherwise things like password reminders and registrations don't work.

GPboarder

Friend of XOOPS
Posted on: 2008/10/31 2:42
GPboarder
GPboarder (Show more)
Friend of XOOPS
Posts: 248
Since: 2006/10/6
#3

Re: Using 2.3.1 I have a problem with user login - goes to endless loop

Thanks for the suggestion.

I've checked the Group permissions and guests have no access to the user profile module.

Under the permissions, nothing is visible to guests.

After confirming access I updated the system and user profile modules.

The problem persists. Same issue if someone selects the lost password link.

More suggestions please.
Optimism is the mother of disappointment.

young

Just popping in
Posted on: 2008/10/31 2:48
young
young (Show more)
Just popping in
Posts: 99
Since: 2006/1/16
#4

Re: Using 2.3.1 I have a problem with user login - goes to endless loop

i also have similar problem like this, but this happened not so often. when i login, it keep me logged out even see the redirect page "Thank for login".

then i try to clear my ie cookies and i be able login again.

GPboarder

Friend of XOOPS
Posted on: 2008/10/31 3:03
GPboarder
GPboarder (Show more)
Friend of XOOPS
Posts: 248
Since: 2006/10/6
#5

Re: Using 2.3.1 I have a problem with user login - goes to endless loop

Thanks,

Logging in from the front page is not a problem if you do it right. The loop can be escaped with the back button without a problem and login remains possible from there.

I'm wondering if I have a corrupt redirect file somewhere but don't know where to look or what to replace.
Optimism is the mother of disappointment.

alboche

Just popping in
Posted on: 2008/10/31 22:57
alboche
alboche (Show more)
Just popping in
Posts: 4
Since: 2008/10/22
#6

Re: Using 2.3.1 I have a problem with user login - goes to endless loop

On 2 sites I'm working on (with XOOPS 2.3.1) I have the same problem. It happens only when I try to log in as a user with wrong user name or/and password, I'll find me in a loop which will time out after a while. There is no problem for a real user or the administrator.

Just before the loop i see:
Incorrect Login!
using XOOPS authentication method
If the page does not automatically reload, please click here

And while the loop (page is refreshing about once a second):
Sorry, you don't have the permission to access this area.
If the page does not automatically reload, please click here

And after time out:
Request-URI Too Large
The requested URL's length exceeds the capacity limit for this server.

I found out by myself that it is, if I don't give module access rights to the Anonymous Users Group for the module User Profile.
I don't know if it is by design, if it is a bug or a problem with my serverconf.
Also, if I don't give module access rights to the Registered Users Group for the same module I cannot log out.

GPboarder

Friend of XOOPS
Posted on: 2008/10/31 23:07
GPboarder
GPboarder (Show more)
Friend of XOOPS
Posts: 248
Since: 2006/10/6
#7

Re: Using 2.3.1 I have a problem with user login - goes to endless loop

Thanks!

I gave the Anonymous Users Group access to the Profile Module and the issue seems to be gone.
Optimism is the mother of disappointment.

macmend

Quite a regular
Posted on: 2008/11/23 19:00
macmend
macmend (Show more)
Quite a regular
Posts: 285
Since: 2004/2/27
#8

Re: Using 2.3.1 I have a problem with user login - goes to endless loop

back button is not an option for me and I am locked out of my site, can anyone please offer a solution, is there a way of editing the db?
Free Mac Support

Ordinary Wisdom

apache server with php sshexec turned on
xoops version 2.0.18.1 & 2.3.1
php version 5.2.5
mysql version 5.0.45

Johnny5Step

Just popping in
Posted on: 2008/11/24 0:26
Johnny5Step
Johnny5Step (Show more)
Just popping in
Posts: 10
Since: 2008/11/22
#9

Re: Using 2.3.1 I have a problem with user login - goes to endless loop

Hi, I'm new to Xoops. I did 4 uninstall and reinstalls yesterday on 2.3.1, and I'm having the same issue each time. The install goes fine. I can login as admin and do all the initial setup. Then once I log out I can't log back in.

I get the same errors as above. Incorrect login etc. then back to the login page.

The lost password process doesn't help. index.php and user.php neither will accept the new password I have just been given.

The last time I set up a secondary user, but that doesn't work either.

The first two times I used Fantastico. Then I thought from what I read here on the forum that that wasn't for the best. The last two were clean installs from the tar downloaded from the XOOPS site. The first time I thought maybe I tried customizing it too much, so I went through the process again and only did a little basic stuff before logging out.

I've tried all the fixes that I found here.
I changed the file /Xoops/kernel/session.php
I have replaced this line:
var $enableRegenerateId = false;
with:
var $enableRegenerateId = true;

I went into phpAdmin and tried to repair and clear the sessions table.

I chmoded the permissions on sessions.php to 777.

All with no effect.

We haven't started using this portal yet, so there's no content. I don't have any problem with uninstalling and doing a clean install. But until I find out why it's letting me in one time as admin then never again, I don't see any future in doing that.

On my last clean install I was even able to satisfy Protector's security advisor except for the one provision that I suppose would have to be done by my host. However, there seems little point in getting them to tighten the security if neither I nor any other member can access the portal. It will, if I can get it working be a member's only board, and registrations verified by admin. We have no desire to be buried under avalanches of viagra etc. ads.

Thanks,
Michael

sailjapan

Moderator
Posted on: 2008/11/24 4:01
sailjapan
sailjapan (Show more)
Moderator
Posts: 1672
Since: 2005/11/16
#10

Re: Using 2.3.1 I have a problem with user login - goes to endless loop

As written above, please check that all users (including anonymous) have access to the Profile Module. When a user arrives at the site, s/he's anonymous until logged in. Giving access to this module should solve the problems. You can remove anonymous users permissions to all content modules separately, thus keeping your content only visible to registered members.

Try this and get back to us.
Never let a man who does not believe something can be done, talk to a man that is doing it.