The Joomla! Forum ™

Download

Demo


Board index » Joomla! Older Version Support » Joomla! 1.0 » Security - 1.0.x

Forum rules


Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Security Checklist
Forum Post Assistant - If you are serious about wanting help, you will use this tool to help you post.



Post new topic Reply to topic  Page 1 of 1
  [ 13 posts ] 
  Print view Previous topic | Next topic 
Author Message
dellvostro
PostPosted: Thu May 07, 2009 11:52 pm 
Joomla! Intern
Joomla! Intern

Joined: Thu Nov 08, 2007 4:14 pm
Posts: 61
Suddenly I cant access my site through back end admin panel. It says incorrect username, password or access level. Ive tried having password resent to my email, and when I try new password, I get same error. I also tried the video tutorial by James Ramsey which didnt work. His tutorial was on a joomla 1.5 application and mine is on 1.0.15
Ive also tried the docmentation for 1.0.13 with the three MD5 re-hash codes but that didnt work either. Im totally baffled now and dont know what to do next.

Thank you for any help or suggestions.

p.s. I can login to front end just fine, which is strange, but cant get in admin area? my database in phpmyadmin has the correct email and username with super administrator. after doing the md5 temp password it still didnt help. ???
Top
 Profile  
 
dellvostro
PostPosted: Fri May 08, 2009 1:34 am 
Joomla! Intern
Joomla! Intern

Joined: Thu Nov 08, 2007 4:14 pm
Posts: 61
When I try to sql the new administrator from this link:
http://docs.joomla.org/How_do_you_recov ... assword%3F

I get the following error:

Error

SQL query:

INSERT INTO `jos_core_acl_aro`
VALUES (
NULL , 'users', LAST_INSERT_ID( ) , 0, 'Administrator', 0
);

MySQL said: Documentation
#1034 - Incorrect key file for table 'jos_core_acl_aro'; try to repair it
Top
 Profile  
 
toivo
PostPosted: Sun May 10, 2009 12:24 am 
User avatar
Joomla! Virtuoso
Joomla! Virtuoso

Joined: Thu Feb 15, 2007 5:48 am
Posts: 3344
Location: Sydney, Australia
Depending on the version of your MySQL server, the function LAST_INSERT_ID( ) may not always work. I will post a comment about the problem into the discussion tab of the document http://docs.joomla.org/How_do_you_recover_your_admin_password%3F.

You can still get the new admin2 user working but the process is more complicated, unfortunately. Do the following query to find out the id of the admin2 user you have inserted:
Code:
SELECT * FROM `jos_users`
WHERE username = 'admin2'
Use that value in the next INSERT query to replace 9999:
Code:
INSERT INTO `jos_core_acl_aro` VALUES (NULL, 'users', 9999, 0, 'Administrator', 0);
Do the following query to find out the aro_id but replace 9999 with the value of id from above:
Code:
SELECT * FROM `jos_core_acl_aro`
WHERE value = 9999
Use the value of aro_id in the last INSERT query to replace 8888:
Code:
INSERT INTO `jos_core_acl_groups_aro_map` VALUES (25, '', 8888);

It does not look pretty but it should work.

_________________
toivo
my first programs were assembled and run in 16KB :)
http://archive.computerhistory.org/resources/text/GE/GE.GE-115SystemSoftware.1967.102646096.pdf#zoom=100
Top
 Profile  
 
dellvostro
PostPosted: Sun May 10, 2009 1:05 am 
Joomla! Intern
Joomla! Intern

Joined: Thu Nov 08, 2007 4:14 pm
Posts: 61
Thank you toivo. My jos_core_acl_aro cannot be edited. Its states "in use". There is no info for recored, type, colaltion, size, etc as there is for all other tables.
Does this make a difference or not with the steps you provided above? Thank you again for your help.
Top
 Profile  
 
toivo
PostPosted: Sun May 10, 2009 1:14 am 
User avatar
Joomla! Virtuoso
Joomla! Virtuoso

Joined: Thu Feb 15, 2007 5:48 am
Posts: 3344
Location: Sydney, Australia
That sounds odd and certainly can make a difference. You could try to repair that table, or get the MySQL server restarted.

_________________
toivo
my first programs were assembled and run in 16KB :)
http://archive.computerhistory.org/resources/text/GE/GE.GE-115SystemSoftware.1967.102646096.pdf#zoom=100
Top
 Profile  
 
dellvostro
PostPosted: Sun May 10, 2009 1:29 am 
Joomla! Intern
Joomla! Intern

Joined: Thu Nov 08, 2007 4:14 pm
Posts: 61
Trying to repair I get the following:
Full Texts
Table Op Msg_type Msg_text
mydomain_database.jos_core_acl_aro repair Error Incorrect key file for table 'jos_core_acl_aro'; t...
mydomain_database.jos_core_acl_aro repair error Corrupt


Is there anyway I can insert hte original install table or would that affect the site and data?

Edit:

This may be a bit reaching, but in checking another sites jos_core_acl_aro file, I see all registered users names with ids.

Could I simply delete the corrupted jos_core_acl_aro and make a new one with just my admin name and id?
Perhaps this would at least let me in to regain admin access. If I simply lsot registered user data they could always come back and re-register. That would get me out of the words for time being as long as no actual site data was lost. :(
Top
 Profile  
 
toivo
PostPosted: Sun May 10, 2009 2:09 am 
User avatar
Joomla! Virtuoso
Joomla! Virtuoso

Joined: Thu Feb 15, 2007 5:48 am
Posts: 3344
Location: Sydney, Australia
I am not sure what options phpMyAdmin offers to repair tables, but one of the selections in the MySQL Administrator is to create a new index file for the table to be repaired. Try that option first.

You may not have to nuke all the users or even create the table manually:
1. Back up the data from the table (this operation will hopefully not involve the damaged index file)
2. Drop the table.
3. Restore the table from the backup.

The backup file contains the statements to create the table if it does not exist, and new index files will be created automatically.

_________________
toivo
my first programs were assembled and run in 16KB :)
http://archive.computerhistory.org/resources/text/GE/GE.GE-115SystemSoftware.1967.102646096.pdf#zoom=100
Top
 Profile  
 
pattaya
PostPosted: Sun May 10, 2009 9:32 am 
User avatar
Joomla! Explorer
Joomla! Explorer

Joined: Sat Dec 17, 2005 4:58 am
Posts: 323
Location: Thailand
I have the same problem over here:

viewtopic.php?f=267&t=400256


What hosting company are you with?

I'm with Hostgator and this is the second time in a couple of years that I get an SQL injection, all my sites are updated, configuration unwritable ect.....

Everytime I get an injection ALL MY SITES get infected, could this be because of bad hosting security? Why does it jump from site to site on my whole reseller account?

Would it be possible to export the SQL without the username password tables, import in a new site and with new username and password and export it back?

_________________
http://www.anonsolutions.com Vancouver Web Design Services
http://www.xuzo.com Toronto Web Designers
Top
 Profile  
 
sketteksalfa
PostPosted: Thu Dec 16, 2010 8:56 am 
User avatar
Joomla! Apprentice
Joomla! Apprentice

Joined: Wed Aug 16, 2006 6:45 pm
Posts: 39
I have tried all but nothing seems to work. I checked my database and this one has been corrupted. Could this be the reason for it?

jos_core_acl_aro
Error : Incorrect key file for table 'jos_core_acl_aro'; try to repair it
error : Corrupt

_________________
Please read the forum rules regarding the use of signatures viewtopic.php?f=8&t=65
Top
 Profile  
 
jacobhen
PostPosted: Fri Jul 08, 2011 7:53 am 
Joomla! Fledgling
Joomla! Fledgling

Joined: Fri Jun 10, 2011 9:19 am
Posts: 3
Hi I am from Vancouver. I am having a joomla website of my own. But its administrator login is not working. I am looking for a solution for it. Please do share some solution.


Last edited by mandville on Fri Jul 08, 2011 8:03 am, edited 1 time in total.
signature against forum rules


Top
 Profile  
 
beededea
PostPosted: Fri Jul 15, 2011 11:22 pm 
User avatar
Joomla! Hero
Joomla! Hero

Joined: Wed Oct 31, 2007 3:48 pm
Posts: 2810
Location: Victorian England 1885
Which version of Joomla are you using?

_________________
Yereverluvinunclebert
Steampunk widgets. Platforms of choice: Joomla 1.0/1.5, Joostina 1.2, OSCommerce
Site aims: Optimisation, Security and Solidity
http://widgets.yahoo.com/widgets/steampunk-clock-calendar
Top
 Profile  
 
texhead
PostPosted: Mon Jul 25, 2011 2:44 am 
User avatar
Joomla! Intern
Joomla! Intern

Joined: Thu Sep 01, 2005 11:53 pm
Posts: 76
Location: Gold Coast Australia :)
Looks like I have the same issue.
I just recently upgraded my server from mysql 5.0.? to 5.1.56 this has corrupted 3 tables of which one is jos_core_acl_aro and cannot be repaired it must be rebuilt as far as I can see.
I am currently rebuilding by dropping the table and recreating it. Then I will repopulate it with user info. This is very tedious to say the least!!!
If anyone can help with an SQL statement to repopulate then please let me know:(

Texhead

_________________
Alleviate all problems from the start - don't start.
Top
 Profile  
 
beededea
PostPosted: Mon Jul 25, 2011 9:57 am 
User avatar
Joomla! Hero
Joomla! Hero

Joined: Wed Oct 31, 2007 3:48 pm
Posts: 2810
Location: Victorian England 1885
I am assuming this is a Joomla 1.5 system? please confirm.
#
# Table structure for table `jos_core_acl_aro`
#

DROP TABLE IF EXISTS `jos_core_acl_aro`;
CREATE TABLE `jos_core_acl_aro` (
`id` int(11) NOT NULL auto_increment,
`section_value` varchar(240) NOT NULL default '0',
`value` varchar(240) NOT NULL default '',
`order_value` int(11) NOT NULL default '0',
`name` varchar(255) NOT NULL default '',
`hidden` int(11) NOT NULL default '0',
PRIMARY KEY (`id`),
UNIQUE KEY `jos_section_value_value_aro` (`section_value`(100),`value`(100)),
KEY `jos_gacl_hidden_aro` (`hidden`)
) ENGINE=MyISAM AUTO_INCREMENT=1600 DEFAULT CHARSET=latin1;

#
# Dumping data for table `jos_core_acl_aro`
#

INSERT INTO `jos_core_acl_aro` (`id`,`section_value`,`value`,`order_value`,`name`,`hidden`) VALUES (Then your data);

_________________
Yereverluvinunclebert
Steampunk widgets. Platforms of choice: Joomla 1.0/1.5, Joostina 1.2, OSCommerce
Site aims: Optimisation, Security and Solidity
http://widgets.yahoo.com/widgets/steampunk-clock-calendar
Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 1 of 1
  [ 13 posts ] 


Board index » Joomla! Older Version Support » Joomla! 1.0 » Security - 1.0.x

Who is online

Users browsing this forum: psbot [Picsearch] and 9 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Jump to:  
Powered by phpBB® Forum Software © phpBB Group