mod_cblogin instead of mod_login for security err

15 years 7 months ago #69966 by tborja
I don't think copying over mod_cblogin would work. The authentication error generated contains reference to the com_user on the content page (see form action tag). There might be a need to turn this feature off in Joomla, but I dont know how :).

<!-- BEGIN: CONTENT -->
<div id="ja-contentwrap">
<div id="ja-content">


<dl id="system-message">

<dt class="message">Message</dt>
<dd class="message message fade">
<ul>
<li>You must log in first</li>
</ul>
</dd>
</dl>

<div id="ja-pathway">
<span class="breadcrumbs pathway">

<a href="www.sharedspacesite.com/" class="pathway">Home Login

</div>

<form action="/component/user/" method="post" name="com-login" id="com-form-login">
<table width="100%" border="0" align="center" cellpadding="4" cellspacing="0" class="contentpane">
<tr>
<td colspan="2">
<div>
<img src="/images/stories/key.jpg" align="right" hspace="10" alt="" /> To access the private area of this site, please log in. <br/><br/>

</div>
</td>
</tr>

</table>
<fieldset class="input">
<p id="com-form-login-username">
<label for="username">Username</label><br />
<input name="username" id="username" type="text" class="inputbox" alt="username" size="18" />
</p>

<p id="com-form-login-password">
<label for="passwd">Password</label><br />
<input type="password" id="passwd" name="passwd" class="inputbox" size="18" alt="password" />
</p>
<p id="com-form-login-remember">
<label for="remember">Remember Me</label>
<input type="checkbox" id="remember" name="remember" class="inputbox" value="yes" alt="Remember Me" />
</p>

<input type="submit" name="Submit" class="button" value="Login" />
</fieldset>
<ul>
<li>
<a href="/component/user/reset">
Forgot your Password?</a>
</li>
<li>
<a href="/component/user/remind">

Forgot your Username?</a>
</li>
</ul>

<input type="hidden" name="option" value="com_user" />
<input type="hidden" name="task" value="login" />
<input type="hidden" name="return" value="aHR0cDovL3d3dy5zaGFyZWRzcGFjZXNpdGUuY29tL3Byb2ZpbGVz" />
<input type="hidden" name="6ff33af1bf1a39832f7f79ce641553bf" value="1" /></form>


</div>
</div>
<!-- END: CONTENT -->

Please Log in to join the conversation.

15 years 7 months ago #70584 by jimcapraro
change /com_user/views/login/tmpl/default_login.php

I replaced the php code with a simple text message

Remember to make a copy of it first

you can check it out at www.milleasplace.org

Post edited by: jimcapraro, at: 2008/08/06 09:54

Please Log in to join the conversation.

15 years 7 months ago #70738 by tborja
Thanks jimcapraro,

I was hoping there would be an option or parameter for this. I did not really want to hack code since i would have to remember to redo it when doing upgrades. I guess this will do for now.

For those who want to remove the key image or change it in mod_login, this is the solution I got from the joomla.org forum.

forum.joomla.org/viewtopic.php?f=431&t=312222#p1367484

Please Log in to join the conversation.

15 years 4 months ago #78959 by ern1001

Please Log in to join the conversation.

Moderators: beatnantkrileon
Time to create page: 0.284 seconds

Facebook Twitter LinkedIn