[CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Confirmed bugs that have been Fixed - Joomla 1.0.x



[New Threads cannot be started in this forum]
Locked
rawdeal
Joomla! Fledgling
Joomla! Fledgling
Posts: 1
Joined: Mon Nov 26, 2007 6:23 pm

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by rawdeal » Mon Nov 26, 2007 6:28 pm

worked for me on a strato-server - thanks man!!!

agentapproved
Joomla! Fledgling
Joomla! Fledgling
Posts: 2
Joined: Tue Nov 27, 2007 1:29 am

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by agentapproved » Tue Nov 27, 2007 4:03 am

you just have to be logged in to see the fix.zip download

bazza123
Joomla! Apprentice
Joomla! Apprentice
Posts: 18
Joined: Fri Oct 26, 2007 8:55 am

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by bazza123 » Tue Nov 27, 2007 8:46 am

Excellent, has fixed the problem and also a couple of other niggly issues I had with editing products (adding text and pictures) which worked inasmuch as the upload succeded but it took a bit of fiddling for the site to display the changes. But I'm  :D again. Thanks

User avatar
muddauber
Joomla! Ace
Joomla! Ace
Posts: 1518
Joined: Thu Jun 08, 2006 11:26 pm

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by muddauber » Wed Nov 28, 2007 12:56 am

Using 1.0.13
My host (PAIR) just recently upgraded PHP to

FreeBSD 4.8-STABLE to FreeBSD 6.2-RELEASE-p1.
Apache is upgraded to version 2.2.4,
mod_php to version 5.2.4 (PHP 4.4.7 is also available as CGI).

I am getting "Allowed Memory SIze Exhausted" errors  when trying to go into the Admin/Components Install area
Fatal error: Allowed memory size of 8388608 bytes exhausted (tried to allocate 16 bytes) in /usr/www/users/myaccount/includes/domit/xml_domit_lite_parser.php on line 194

User avatar
aadhunik
Joomla! Apprentice
Joomla! Apprentice
Posts: 32
Joined: Mon Nov 07, 2005 2:32 am
Location: Ghaziabad UP India
Contact:

Re: HotFix for the admin session bug

Post by aadhunik » Wed Nov 28, 2007 2:33 am

Thank you very much.

This solves my problem.

That was a pain in my ****




Jaspal Singh Sutdhar, Aadhunik Web Solutions India




soeren wrote: Well,
VirtueMart is also affected by this bug.
The problem is indeed a wrong order of the calls to initSessionAdmin and doGzip at the end of the file /administrator/index2.php.
If we change

BEFORE

Code: Select all

103		doGzip();
104		
105		// if task action is 'save' or 'apply' redo session check
106		if ( $task == 'save' || $task == 'apply' ) {
107			$mainframe->initSessionAdmin( $option, '' );
108		}
to

Code: Select all

102		// if task action is 'save' or 'apply' redo session check
103		if ( $task == 'save' || $task == 'apply' ) {
104			$mainframe->initSessionAdmin( $option, '' );
105		}
106		doGzip();
the problem is gone.

I have posted a Hotfix for Joomla! 1.0.13 on the VirtueMart Homepage.
Feel free to try it. It just contains the updated index2.php file.

ciao, Sören
Jaspal Singh Sutdhar, Aadhunik.com Community Portal Web Site Services India http://www.aadhunik.com

allanbj
Joomla! Fledgling
Joomla! Fledgling
Posts: 1
Joined: Wed Nov 28, 2007 9:48 am

Re: [UNDER REVIEW] Joomla! 1.0.13 Admin session dies for certain $task values

Post by allanbj » Wed Nov 28, 2007 9:59 am

RobS wrote: than the previous fix that was made.  I have attached a zip file to this post with two files in it.  The first file is index.php should replace
Also did the trick for me, running Win2000 and IIS with PHP 5.x. Thanks!!!

Allan

suchloc
Joomla! Fledgling
Joomla! Fledgling
Posts: 1
Joined: Wed Nov 28, 2007 12:10 pm

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by suchloc » Wed Nov 28, 2007 12:35 pm

It`s working, but....
When i login to admin site there is :

_ADM_WELCOME_TO_JOOMLA

_ADM_USE_A_VALID_USERNAME

next to login and pass fields, also I have a different problem.

When i trying to change content which is include a images, the URL`s are diffrent and images doesn't show.
URL looks like: http://null/ and then is the correct path.

Anyone knows how to solve it?

zorgrian
Joomla! Fledgling
Joomla! Fledgling
Posts: 4
Joined: Mon Mar 20, 2006 7:09 pm

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by zorgrian » Wed Nov 28, 2007 9:19 pm

OK --- I have been just getting used to the idea that I had to log back in E V E R Y time I made any change in the back end of Virtuemart! Finally I got Peeeeeeed off with this!!!!

So, I started hunting across the net for solutions. I arrive at these fantastic posts and it seems just Great! Everyone is happy! Nobody has to put up with this loging out of the back end any more! Good!

Except: NEITHER I NOR IT APPEARS QUITE ALOT OF PEOPLE ON THIS FORUM HAVE THE FAINTEST IDEA WHERE THESE ILLUSIVE HOT FIX CAN BE FOUND, WHAT IT IS, OR HOW DO YOU EVEN SNEAK UP ON IT?

This is serious--- I humbly implore anone who actually knows of the whereabouts of the zip file or any other FIX for this problem to come out from your hiding places and tell us, spread the word, Many prophets started out with simpler offerings! The world needs you!

Please tell us where the golden fix actually is or if it involved some esoteric dark art/ science/ wizardry then spill the beans please! I beseech thee

User avatar
crockford
Joomla! Apprentice
Joomla! Apprentice
Posts: 43
Joined: Tue Aug 30, 2005 2:47 pm

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by crockford » Wed Nov 28, 2007 9:29 pm

zorgrian wrote: Please tell us where the golden fix actually is or if it involved some esoteric dark art/ science/ wizardry then spill the beans please! I beseech thee
The longer this topic becomes the harder it is to find the fixes. You can find links to all three fixes in this message:

http://forum.joomla.org/index.php/topic ... msg1078828
internet activism @ crockford.org

zorgrian
Joomla! Fledgling
Joomla! Fledgling
Posts: 4
Joined: Mon Mar 20, 2006 7:09 pm

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by zorgrian » Wed Nov 28, 2007 10:03 pm

Cool! OK I just realized thee actual solution is a hot fix which was posted NOT on this forum but on the actual Virtuemart page. Because it appears that there are many like I, who are really to thick (dumb in Am-English) to get the hang of this fact or are too impatient to look carefully B4 posting stuff up here I have included a link to the hot fix.

http://virtuemart.net/index.php?option= ... &Itemid=66

LBen
Joomla! Apprentice
Joomla! Apprentice
Posts: 19
Joined: Sat Jan 28, 2006 2:50 am
Contact:

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by LBen » Fri Nov 30, 2007 10:36 pm

Thanks for the fix. For what it's worth, it didn't work for me at first and I was unable to save or apply changes to stories until I turned off tinyMCE.

It now works fine.

Config:
Joomla! 1.0.13 with fix
Joomfish 1.8.1

gatetoall
Joomla! Fledgling
Joomla! Fledgling
Posts: 4
Joined: Fri Nov 23, 2007 9:06 pm

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by gatetoall » Sat Dec 01, 2007 3:57 am

Hello

I have installed J 1.0.13  and virtuemart 1.0.13a then as soon as i login to the administrator and try to add a product i get loggged out automatically so what i did (replaced the index.php and index2.php and joomla.php from the joomla part) and replaced from virtumart some other files (ps_session.php ps_shopper.php, vituemart_parser.php) :

here is the fixed in detail:

http://virtuemart.net/index.php?option= ... ad&gid=371
http://forum.joomla.org/index.php/topic ... #msg943504
http://forum.joomla.org/index.php/topic ... msg1074656


before replacing all of these fixes as soon as i was adding products after saving them  i got logged out automatically but it was saving the product  in the website
Currently what is happening I am not being logged out after adding new products but all appears to be fine in the administrator where i see the product being saved but as soon as i go to the website i don;t see these new products (i see only the old ones, i go back to the administrator and i still see the product i have added but they do not appear in the website)
it does not seem to be happening to the product only but it is also happening if i change anything in the configuration it will not take into affect.

I thought i have fixed the issue yesterday by re-downloading all virtuemart patch kit for 1.0.13a it did update my previous changes and change in my configuration but when i try to add new product and/or change in the configuration it is not being updated in the website.

It is important to note when i have replaced all of the php file it did fix the issue of my user not being loged out automatically after each action after saving in the adoministration of virtuemart a new change  but it does not update these changes in the website and also the first time i log in to the website and go to virtuemart i got logged out (like if there is no session) then go back to virtuemart and never get logged out but all my changes are only being saved in the backend not in the website

i even tried creating a new user account gave it super administration rights and still same issue

pls help i have been struggling for a week

thanks 

jhisey
Joomla! Fledgling
Joomla! Fledgling
Posts: 3
Joined: Sun Jul 29, 2007 2:43 pm

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by jhisey » Sat Dec 01, 2007 3:39 pm

I'm wondering if this isn't related to an issue I'm having.  Not every time, but a LOT of times, users are unable to login to the site.  After clicking login, sometimes they see

http://stonegatehoa.com/http://www.ston ... /index.php

other times they see

http://www.stonegatehoa.com/index.php?o ... task=login

If I remove the task=login part, it will come up w/ the user logged in.

I'm using:
Joomla 1.0.13
CB 1.1
SMF 1.1.4

User avatar
jimspeedjae
Joomla! Apprentice
Joomla! Apprentice
Posts: 14
Joined: Sat Feb 04, 2006 6:53 pm
Contact:

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by jimspeedjae » Sun Dec 02, 2007 11:28 am

Well, I'm another one...

I installed Virtuemart 1.0.13a on Joomla 1.0.13 and got the infuriating admin logout, so I installed the patch on the Virtuemart site.

Worked perfectly for a few days and I had created a series of products and test orders without problem up to last night.

Woke up this morning and logged in, tried to save a change in VM and got booted out of admin. Log back in and touch any link in the admin site and I get booted out again. I can only get as far as the initial admin index page. The same in any browser.

The only thing I know happened in the night is that I had some emails created by VM about the Paypal IPN transactions (and the order status)...these transactions were only a few days old but they all came at 1:30am this morning...I have no idea if this has triggered a change or is a cause/symptom of the same issue.

I have tried every fix I can find posted on here, inlcuding the patches and file hacks. Most of them stop me being able to log in at all, so i've gone back.

I've asked my hosting provider if there have been any changes made during the night that might have caused a problem...haven't heard back yet. I can still log into the front-end OK.

Any suggestions welcome as at the moment I can't do a thing.

Joomla heroes where are you please :)

James

User avatar
burek
Joomla! Intern
Joomla! Intern
Posts: 87
Joined: Fri Nov 17, 2006 12:20 pm

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by burek » Sun Dec 02, 2007 1:54 pm

have you tried erasing cookies, etc.?

User avatar
jimspeedjae
Joomla! Apprentice
Joomla! Apprentice
Posts: 14
Joined: Sat Feb 04, 2006 6:53 pm
Contact:

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by jimspeedjae » Sun Dec 02, 2007 2:11 pm

Maybe I'm a dope for trying every patch in the world before doing that, but it works!

Thanks a million!!

James

Egyptianwebdesigner
Joomla! Apprentice
Joomla! Apprentice
Posts: 26
Joined: Fri Sep 21, 2007 3:30 am
Location: Egypt
Contact:

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by Egyptianwebdesigner » Mon Dec 03, 2007 9:48 am

thanks guys for the fix

but can any one post the link for the fix.zip file please ?

jhisey
Joomla! Fledgling
Joomla! Fledgling
Posts: 3
Joined: Sun Jul 29, 2007 2:43 pm

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by jhisey » Mon Dec 03, 2007 12:12 pm

The link is posted 5 messages back.  You have to be logged in to see the actual file in the msg the link takes you to.

mpurvis
Joomla! Fledgling
Joomla! Fledgling
Posts: 1
Joined: Thu Dec 08, 2005 12:45 am

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by mpurvis » Mon Dec 03, 2007 2:53 pm

Thanks mate- great help with easy instruction - love it ! :D

carlitogr
Joomla! Apprentice
Joomla! Apprentice
Posts: 7
Joined: Wed Jul 19, 2006 10:43 am

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by carlitogr » Wed Dec 05, 2007 10:49 pm

Thanks mate for the fix. That was really an annoying issue.

tobesp
Joomla! Fledgling
Joomla! Fledgling
Posts: 1
Joined: Wed Dec 05, 2007 7:10 am

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by tobesp » Fri Dec 07, 2007 1:41 am

thanks very much!!!! works an absolute treat.  ;D

nordine
Joomla! Fledgling
Joomla! Fledgling
Posts: 2
Joined: Thu Dec 06, 2007 11:03 pm

Re: Joomla! 1.0.13: Admin session dies for certain $task values on IIS

Post by nordine » Fri Dec 07, 2007 1:02 pm

Geraint wrote: Some insights (and a fix?)

The problem arises if you have a component that doesn't use a mosRedirect at the end of processing a 'save' or 'apply' task.  You can simulate the problem by commenting out the mosRedirct at line 789 in admin.content.php and then saving some content.

This is the warning you get:

Warning: session_start() [function.session-start]: Cannot send session cookie - headers already sent by (output started at C:\Documents and Settings\Geraint\Documents\joomlacode\Joomla1.0.x\includes\joomla.php:4145) in C:\Documents and Settings\Geraint\Documents\joomlacode\Joomla1.0.x\includes\joomla.php on line 800

This is caused by an attempt to set the session cookie (in initSessionAdmin) after the headers have already been sent via the doGzip() at the end of index2.php.  If you put the doGzip right at the end of the file (AFTER the call to $mainframe->initSessionAdmin( $option, '' );) then everything works.

Geraint
Thanks Geraint,

It seems to work so far.
I got the same issue with Joomfish component.

Nordine

mihai.nadas
Joomla! Fledgling
Joomla! Fledgling
Posts: 1
Joined: Wed Nov 28, 2007 7:12 am

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by mihai.nadas » Sat Dec 08, 2007 9:33 am

Ok, nice job! When will you include the fix in the stable release?

Ironside
Joomla! Ace
Joomla! Ace
Posts: 1724
Joined: Mon Nov 13, 2006 8:01 pm
Contact:

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by Ironside » Sat Dec 08, 2007 1:07 pm

Do I just install the two files that come with this patch into the joomla directory, although I have to put them into the Virtuemart section?
Ham and eggs. A day's work for a chicken, a lifetime commitment for a pig.

http://www.tetraplegicliving.com
http://www.oscarfishlover.com

Muka-Muka
Joomla! Fledgling
Joomla! Fledgling
Posts: 1
Joined: Mon Dec 10, 2007 9:22 am

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by Muka-Muka » Mon Dec 10, 2007 9:24 am

I can not find the "fix.zip" here in this post, anyone can re-write the link to the file here please?

Thz in advance!

sangcom
Joomla! Fledgling
Joomla! Fledgling
Posts: 1
Joined: Mon Dec 10, 2007 10:05 am

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by sangcom » Mon Dec 10, 2007 10:13 am

Thanks Robs I did it

itlionat
Joomla! Fledgling
Joomla! Fledgling
Posts: 3
Joined: Mon Dec 10, 2007 9:55 am

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by itlionat » Mon Dec 10, 2007 12:22 pm

muddauber wrote: Using 1.0.13
My host (PAIR) just recently upgraded PHP to

FreeBSD 4.8-STABLE to FreeBSD 6.2-RELEASE-p1.
Apache is upgraded to version 2.2.4,
mod_php to version 5.2.4 (PHP 4.4.7 is also available as CGI).

I am getting "Allowed Memory SIze Exhausted" errors  when trying to go into the Admin/Components Install area
Fatal error: Allowed memory size of 8388608 bytes exhausted (tried to allocate 16 bytes) in /usr/www/users/myaccount/includes/domit/xml_domit_lite_parser.php on line 194
Hi,
I had the same problem like you since I used the new cPanel easy apache builder script to upgrade my apache. I could fix the same problem what you have now with increasing the  memory_limit to more than 8MB. However I also have since my apache upgrade this login problem with all my Joomla sites on my server. I can't login in the backend. I always receive this login again message like after an time out. Because I never had any problems with running Joomla on my server before (whatever version I installed), I strongly believe it has something to do with the apache build or php configuration. I'm still trying out to figure out what it caused. My 1st guess is that the joomla code for the admin area is still not fully compatible with the latest version of PHP cause my apache uses now only the latest PHP version and no more PHP4 (before I used both on my server).

User avatar
mikaelfs
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 115
Joined: Thu Oct 19, 2006 6:11 pm
Contact:

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by mikaelfs » Mon Dec 10, 2007 3:56 pm

Guys,
I posted summary of this problem, along with my investigation and alternative patch at http://tech.amikelive.com/node-41/compr ... omla-1013/
New article:
http://tech.amikelive.com/node-68/adsen ... sion/  - Adsense Widget For Wordpress Sidebar Updated Version

itlionat
Joomla! Fledgling
Joomla! Fledgling
Posts: 3
Joined: Mon Dec 10, 2007 9:55 am

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by itlionat » Mon Dec 10, 2007 5:04 pm

mikaelfs wrote: Guys,
I posted summary of this problem, along with my investigation and alternative patch at http://tech.amikelive.com/node-41/compr ... omla-1013/
Thanks mikaelfs for your help! However my sites still don't work. I get the same error like with the standard patch "invalid session"  :'( . I have the same problem with older Joomlas than 1.0.13 and also with a 1.5rc Joomla site.
My configuration is:
Fedora Linux with Apache 2.2 and PHP5.2.5
PHP Session settings:
Directive Local Value Master Value
session.auto_start Off Off
session.bug_compat_42 On On
session.bug_compat_warn On On
session.cache_expire 180 180
session.cache_limiter nocache nocache
session.cookie_domain no value no value
session.cookie_httponly Off Off
session.cookie_lifetime 0 0
session.cookie_path /      /     
session.cookie_secure Off Off
session.entropy_file no value no value
session.entropy_length 0 0
session.gc_divisor 100 100
session.gc_maxlifetime 1440 1440
session.gc_probability 1 1
session.hash_bits_per_character 4 4
session.hash_function 0 0
session.name PHPSESSID PHPSESSID
session.referer_check no value no value
session.save_handler user user
session.save_path /tmp /tmp
session.serialize_handler php    php   
session.use_cookies On On
session.use_only_cookies Off Off
session.use_trans_sid 1 1
I tried to change many different PHP settings but with no success.
It is understandable that the development team tries to make Joomla as secure as possible but what sense does it make when even the Admin can't log in? It would be nice to have the option to change to a more compatible session method in case of server upgrades or changes.

I will try today to rebuild apache with the older versions of apache and php. I hope that it will work again like before.

User avatar
mikaelfs
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 115
Joined: Thu Oct 19, 2006 6:11 pm
Contact:

Re: [CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

Post by mikaelfs » Mon Dec 10, 2007 5:45 pm

Hi,
session.save_handler  user  user
session.save_path  /tmp  /tmp
Please read the entire post about the session problem. It should solve the problem. I have tested the solution earlier.
New article:
http://tech.amikelive.com/node-68/adsen ... sion/  - Adsense Widget For Wordpress Sidebar Updated Version


Locked

Return to “Q&T 1.0.x Resolved”