Session Expired, Trying To Edit Profile -frontend

12 years 6 months ago #38510 by RiTaL
Yes i've search the forums found some threads with the same problems but weren't helped.

PHP Version 4

not sure on my SQL version but this is my host if it helps; www.xwebhosting.org

w00t@
12 years 6 months ago #38595 by beat
we need *detailed* versions, sorry. If you can't, please ask a professional to fix it for you.

Beat - Community Builder Team Member

Before posting on forums: Read FAQ thoroughly -- Help us spend more time coding by helping others in this forum, many thanks :)
CB links: Our membership - CBSubs - Templates - Hosting - Forge - Send me a Private Message (PM) only for private/confidential info
12 years 6 months ago #38606 by RiTaL
Detailed Version of what? Php, SQL, Jamoola, CB, ?

Please be specific, and you are the professional, its your software you should make sure its working.

w00t@
12 years 6 months ago #38608 by beat
Beat wrote:

What is your *exact* setup ? , exact php version and build ?

If you need professional services, you can contact any team member.


I don't think I have anything to add here, as it was already requested. ;)

Yes, having exact versions of all your setup will not harm and may help.
Joomla provides that to you for free in the "Version info" menu.

CB runs for free and fine on many servers, except with some "hardened" installs which in some specific configs has a limited name length, and needs adjusting or applying a fix, documented in this forum (just search forum for "hardened php", it's one of the first links, but of course only if you have that php version). That's why i was asking for this info.
Please note this is free software, and free support forum by the community, but specific private support is not included, sorry.

If you need a quote for private support, you can post a job at joomlancers. :)

Beat - Community Builder Team Member

Before posting on forums: Read FAQ thoroughly -- Help us spend more time coding by helping others in this forum, many thanks :)
CB links: Our membership - CBSubs - Templates - Hosting - Forge - Send me a Private Message (PM) only for private/confidential info
12 years 6 months ago #38610 by RiTaL
PHP built On: Linux palma.ourhostingservers.com 2.6.9-42.0.10.ELsmp #1 SMP Fri Feb 16 17:17:21 EST 2007 i686
Database Version: 4.1.21-standard
PHP Version: 4.4.4
Web Server: Apache
WebServer to PHP interface: apache
Joomla! Version: Joomla! 1.0.12 Stable [ Sunfire ] 25 December 2006 01:00 UTC
User Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.1.3) Gecko/20070309 Firefox/2.0.0.3
Relevant PHP Settings:
Joomla! Register Globals Emulation: OFF
Register Globals: OFF
Magic Quotes: ON
Safe Mode: OFF
File Uploads: ON
Session auto start: OFF
Session save path: /tmp
Short Open Tags: ON
Output Buffering: OFF
Open basedir: /home/ritaltid:/usr/lib/php:/usr/local/lib/php:/tmp
Display Errors: ON
XML enabled: Yes
Zlib enabled: Yes
Disabled Functions: none

w00t@
12 years 5 months ago #40108 by SuperGuido
I've got this same problem along with the registration page problem of session expired. I tried the fixes (changing the === to == and shortening the [code:1]$validate = 'cbj'[/code:1] line, neither of which worked for me though the error did change from "Registration session expired and/or cookies are not enabled in your browser" to simply
"Session expired" which leads me to believe it is passing the cbRegAntiSpamCheck but failing something else. Looking in the code it is probably one of the following from the error message:
cbSpoofCheck
cbGetRegAntiSpams
cbGetAntiSpams
cbAntiSpamCheck

Upon further testing I found it to be cbSpoofCheck so that's the culprit. Now how to fix it...

So that's where I'm looking right now. I have disabled the CB registration page and gone back to the Joomla one for now and doing manual synchs. Of course it doesn't much matter since attempting to update the user profile gives the error message.

Here are my versions:

CB: 1.02
PHP built On: Linux 2.4.21-32.ELsmp #1 SMP Fri Apr 15 21:17:59 EDT 2005 i686
Database Version: MYSQL 4.0.27-max-log
PHP Version: 4.3.11
Web Server: Apache
WebServer to PHP interface: cgi-fcgi
Joomla! Version: Joomla! 1.0.12 Stable [ Sunfire ] 25 December 2006 01:00 UTC
User Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.4) Gecko/20070515 Firefox/2.0.0.4





Relevant PHP Settings:
Joomla! Register Globals Emulation: OFF
Register Globals: OFF
Magic Quotes: ON
Safe Mode: OFF
File Uploads: ON
Session auto start: OFF
Session save path: /tmp
Short Open Tags: ON
Output Buffering: OFF
Open basedir: none
Display Errors: ON
XML enabled: Yes
Zlib enabled: Yes
Disabled Functions: none

Thanks for any help. I'm happy to work with you on this to get it fixed because I like the component and really would like to get it fully functional. Strange thing is it WAS fully functional until earlier today and I didn't install or delete anything today.

Post edited by: SuperGuido, at: 2007/06/26 00:20

FINAL EDIT:
Ok so I fixed it myself.
change this around line 1939:

[code:1]
function cbSpoofCheck() {
// if ( is_callable("josSpoofCheck"«»)) {
// josSpoofCheck(1); Buggy in 1.0.11 with arrays, depreciated in 1.5. So implementing ourselves:
// } else {
global $mainframe;
$validate = 'cbj' . md5( $mainframe->getCfg('secret')) . md5( $mainframe->getCfg( 'db' ) . date( 'dmY' ) );
$validateValue = mosGetParam( $_POST, $validate, 0 );
if (!$validateValue) {
header( 'HTTP/1.0 403 Forbidden' );
echo "<script>alert('Session expired-1.'); window.history.go(-1);</script> \n";
exit;
}[/code:1]

to this:

[code:1]function cbSpoofCheck() {
// if ( is_callable("josSpoofCheck"«»)) {
// josSpoofCheck(1); Buggy in 1.0.11 with arrays, depreciated in 1.5. So implementing ourselves:
// } else {
global $mainframe;
// $validate = 'cbj' . md5( $mainframe->getCfg('secret')) . md5( $mainframe->getCfg( 'db' ) . date( 'dmY' ) );
// $validateValue = mosGetParam( $_POST, $validate, 0 );
// if (!$validateValue) {
// header( 'HTTP/1.0 403 Forbidden' );
// echo "<script>alert('Session expired-1.'); window.history.go(-1);</script> \n";
// exit;
// }[/code:1]

Voila. Sure it's skipping a piece of the puzzle, but it's working :)

Post edited by: SuperGuido, at: 2007/06/26 00:36

Post edited by: SuperGuido, at: 2007/06/26 02:48

Generation: Gamerz
www.generationgamerz.com
News. Reviews. Culture. Insight.
By Gamerz. For Gamerz.
Moderators: beatnantkrileon
Time to create page: 0.425 seconds
Facebook Twitter Google LinkedIn