PLEASE HELP - Admin Login Loop

Nuke Soldier Joined: Mar 10, 2005 Posts: 27

Hello,
I recently uploaded phpNUKE 7.6 to my site manager. I created my admin account and my superuser as suggested and every time I try to login it just keeps looping back to the admin login screen. It shows me as a member and an admin, but it won't let me login. I also downloaded php NUKE Platinum and Inferno and the same exact thing happens when I try to run it locally. I am 100% certain that I have everything configured correctly and I know that cookies are enabled on my pc.

Can someone PLEASE tell me how to fix this most aggravating problem? Evil or Very Mad

Thank you in advance.

- Aedryan

Nuke Soldier Joined: Mar 19, 2005 Posts: 14

I have exactly the same problem a never ending loop when I log in Sad

Please if anyone has any suggestions ??

Nuke Soldier Joined: Mar 10, 2005 Posts: 27

FINALLY, I solved this mystery! The reason this happens is because you can't make your password more than 10 characters long when you create your superuser. Just get in your database, delete the superuser (God) that you created then go to your admin login and create a new superuser Just be sure to keep your password under 10 characters long and you'll be good to go.

By the way, Nuke 7.6 Platinum totally rawks!!!! I swear, the angels sang when I finally logged in as admin and saw all of it's kickbutt features!

- Aedryan

Nuke Cadet Joined: Jun 15, 2005 Posts: 1

FYI ... Thanks for the tip on the password limit.
It seems that there are two main problems that people are suffering

a) you login to admin ... reach the admin panel ... and then get looped back to the Login when attempting any function.

and

b) you login to admin and are looped straight back to login.

Quite possibly there are multiple causes for each.

I was getting problem B)

This was because when you create a new admin password for the first time the form field for Password has a MAXLENGTH of 10 chars.
When you modify the password in Edit Admins it accepts 12
When you login to admin it accepts 18 chars.
When you login to the normal login it accepts 20 chars.

Now this is obviously an issue ..
When you create your first super account you key in the password "MyFirstAdminPassword".
This is truncated to 10 chars "MyFirstAdm" and stored in the DB. (encrypted/hashed of course)
When you go to login you key "MyFirstAdminPassword" which is truncated to "MyFirstAdminPasswo".
Nuke compares the hashes for "MyFirstAdm" against "MyFirstAdminPasswo" and fails your login.

For your information I am including the lines containing password fields with maxlengths, I would suggest that the majority of these MAXLENGTHs need to be set to a common value.

I may even post patched code after I go through and doublecheck passlength requirements for the various modules. (or not ... we'll see)

Hope this helps.

Below Details apply to Release 7.7

\admin.php
-> line 68 (maxlength=10)
-> line 167 (maxlength=18)

\banners.php:
-> line 129 (maxlength=10)

\mainfile.php:
-> line 899 (maxlength=20)

\admin\modules\authors.php:
-> lines 116 (maxlength=12)
-> lines 220 (maxlength=12)
-> lines 222 (maxlength=12)

\blocks\block-Login.php:
-> line 30 (maxlength=20)

\blocks\block-User_Info.php:
-> line 113 (maxlength=20)

\modules\Your_Account\index.php:
-> lines 604 (maxlength=20)
-> lines 644 (maxlength=40)
-> lines 645 (maxlength=40)
-> lines 1054 (maxlength=20)

\modules\Your_Account\admin\index.php:
-> lines 91 (maxlength=12)
-> lines 233 (maxlength=12)
-> lines 235 (maxlength=12)

Site Admin Joined: Aug 17, 2003 Posts: 12373

You may want to see what the Patched files changed as well. http://www.nukefixes.com