Upgraded joomla from 1.0.12 to 1.0.13.
I was able to login in the admin section, though, wherever I clicked I was logged out and got this message.
Quote:
You need to login. If PHP's session.auto_start setting is on or session.use_cookies setting is off, you may need to correct this before you will be able to login.
I applied your fix and I was unable to login, and got this message instead:
Quote:
Invalid Session
I tried a quick and dirty idea, by replacing administrator/index.php and includes/joomla.php by the 1.0.12 versions, though that didn't work (invalid password, they have already been salted apparently).
Perhaps the warning on the frontpage for the 1.0.13 version should mention that some user are unable to login as admin once the upgrade is complete :-/
Is there a possible downgrade path?
Edit: some info on the system :
Apache 2.0 mod_php5 mysql 4.1.22
PHP 5.2.3
session.use_cookies On
session.auto_start On
register_globals On
magic_quotes_gpc On
safe_mode On
file_uploads On
The front end login works without problems
Could it be the influence of fireboard?
HTTP_COOKIE PHPSESSID=some long hex number;
another hex number=another hex number;
webfxtab_modules-cpanel=4;
still an hex number;
yahn (yet another hex number);
fboard_settings[member_id]=0; fboard_settings[prevvisit]=10 digit number; fboard_settings[current_view]=flat
(not being perfectly sure of what those hex number are, I prefer not to show them :-[)
Edit2: The downgrade path: change back administrator/index.php and includes/joomla.php reset the admin password in the database: see
http://forum.joomla.org/index.php/topic,10985.0.htmlThis allow you to login and work with your installation (though, you'll have to reset the password of other users who logged in)
Do not change your password using joomla interface
Replace the files changed by the 1.0.12->1.0.13 upgrade by the 1.0.12 files (you could directly do that, and reset the password, if you do not any reason to fiddle in the admin interface first).
Now you can change your password using joomla's interface (admin is a bit obvious for an admin password :p )
By the way, may I suggest a regenerate password+mass mailing feature for this kind of incident? (and a new howto for the reset of the password. With salt, the linked method won't work anymore, will it?)