[CONFIRMED+FIX] Joomla! 1.0.13 Admin session dies for certain $task values

[greenarrow]

Thank Bro Thank You Very Much. I Got it

[greenarrow]

THE eXtplorer COMPONENT FOR JOOMLA HOT FIX PROBLEM IS SLOVED. DOWNLOAD IT FROM THE FOLLOWING LINK.

ALSO READ THE INSTALLATION DETAILS THERE


DOWNLOAD HOTFIX FOR JOOMLA : http://forum.joomla.org/index.php/topic ... #msg943504




HOW TO INSTALL HOTFIX FOR JOOMLA :

The first file is index.php should replace administrator/index.php and joomla.php should replace includes/joomla.php  When you put these files in place, you will probably get logged out but once you get logged back in, the problem will hopefully be fixed.  Please do not test this on live sites though, I cannot guarantee that it works as I am working on a laptop and only have one environment to test against.

By : RobS
Development Workgroup
Joomla! Hero.




DOWNLOAD eXtplorer component : http://extensions.joomla.org/component/ ... Itemid,35/

[greenarrow]

I have the same problem when i try to login first time after install hotfix . i load my browser again and try,  it give me the access. 

HOTFIX IS WORKING FINE.

[Trank]

Hi all,

I'm sorry that I have taken so long to get back here but I have just been really busy and dealing with life.  I went through and tried to rework the problem so it doesn't have this problem and I think I found a way to deal with it that it is just as secure and possibly faster than the previous fix that was made.  I have attached a zip file to this post with two files in it.  The first file is index.php should replace administrator/index.php and joomla.php should replace includes/joomla.php  When you put these files in place, you will probably get logged out but once you get logged back in, the problem will hopefully be fixed.  Please do not test this on live sites though, I cannot guarantee that it works as I am working on a laptop and only have one environment to test against.

Well, after I patched that two files, I got event worse situation. 
There isn't any logging interface any more, and I got the following message:

Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.
Please contact the server administrator, [email protected] and inform them of the time the error occurred, and anything you might have done that may have caused the error.

More information about this error may be available in the server error log.
--------------------------------------------------------------------------------
Apache/1.3.33 Server at educational-dev.blisswisdom.org Port 80

[deomurari]

Dear Friends.....


  While trying to install eXtplorer I tried to install Robs patch...And screwed up my whole site....
Then I had restored the original files from my backup.....But now I can get in to backend....But in frontend I'm getting "The page isn't redirecting properly" error.

For SEF I'm using latest version of SH404SEF

Details is given below:

Joomla! Register Globals Emulation:  OFF 
Register Globals: ON
Magic Quotes: ON
Safe Mode: OFF
File Uploads: ON
Session auto start: OFF
Session save path: /tmp
Short Open Tags: ON
Output Buffering: OFF
Open basedir: none
Display Errors: ON
XML enabled: Yes
Zlib enabled: Yes
Disabled Functions: dl

PHP built On:  Linux mach1.websitewelcome.com 2.6.22_hg_grsec_pax #45 SMP Thu Dec 6 03:29:19 CST 2007 i686
Database Version: 4.1.22-standard
PHP Version: 4.4.4
Web Server: Apache/1.3.37 (Unix) mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 FrontPage/5.0.2.2635.SR1.2 mod_ssl/2.8.28 OpenSSL/0.9.7a PHP-CGI/0.1b
WebServer to PHP interface: cgi

My .htaccess

##

# @version $Id: htaccess.txt 5975 2006-12-11 01:26:33Z robs $

# @package Joomla

# @copyright Copyright (C) 2005 Open Source Matters. All rights reserved.

# @license http://www.gnu.org/copyleft/gpl.html GNU/GPL

# Joomla! is Free Software




order allow,deny

deny from all




Options +FollowSymLinks



#

#  mod_rewrite in use


RewriteEngine On

RewriteCond %{HTTP_HOST} ^waders.in [NC]

RewriteRule ^(.*)$ http://www.waders.in/$1 [L,R=301]

RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK)

RewriteRule .* – [F]


#  Uncomment following line if your webserver's URL

#  is not directly related to physical file paths.

#  Update Your Joomla!/MamboDirectory (just / for root)


RewriteBase /site

########## Begin - Joomla! core SEF Section

############# Use this section if using ONLY Joomla! core SEF

## ALL (RewriteCond) lines in this section are only required if you actually

## have directories named 'content' or 'component' on your server

## If you do not have directories with these names, comment them out.

#

#RewriteCond %{REQUEST_FILENAME} !-f

#RewriteCond %{REQUEST_FILENAME} !-d

#RewriteCond %{REQUEST_URI} ^(/component/option,com) [NC,OR] ##optional - see notes##

#RewriteCond %{REQUEST_URI} (/|\.htm|\.php|\.html|/[^.]*)$  [NC]

#RewriteRule ^(content/|component/) index.php

#

########## End - Joomla! core SEF Section





########## Begin - 3rd Party SEF Section

############# Use this section if you are using a 3rd party (Non Joomla! core) SEF extension - e.g. OpenSEF, 404_SEF, 404SEFx, SEF Advance, etc

#

RewriteCond %{REQUEST_URI} ^(/component/option,com) [NC,OR] ##optional - see notes##

RewriteCond %{REQUEST_URI} (/|\.htm|\.php|\.html|/[^.]*)$  [NC]

RewriteCond %{REQUEST_FILENAME} !-f

RewriteCond %{REQUEST_FILENAME} !-d

RewriteRule (.*) index.php

#

########## End - 3rd Party SEF Section

# Only if you use PHP





php_flag zlib.output_compression On

php_value zlib.output_compression_level 8

php_value memory_limit 60M

php_flag register_globals off

php_value max_execution_time 80

php_value upload_max_filesize 16777216

php_value post_max_size 16777216

php_value max_input_time 90








# Block out any script trying to set a mosConfig value through the URL

RewriteCond %{QUERY_STRING} mosConfig_[a-zA-Z_]{1,21}(=|\%3D) [OR]

# Block out any script trying to base64_encode crap to send via URL

RewriteCond %{QUERY_STRING} base64_encode.*\(.*\) [OR]

# Block out any script that includes a tag in URL

RewriteCond %{QUERY_STRING} (\|%3E) [NC,OR]

# Block out any script trying to set a PHP GLOBALS variable via URL

RewriteCond %{QUERY_STRING} GLOBALS(=|\[|\%[0-9A-Z]{0,2}) [OR]

# Block out any script trying to modify a _REQUEST variable via URL

RewriteCond %{QUERY_STRING} _REQUEST(=|\[|\%[0-9A-Z]{0,2})

# Send all blocked request to homepage with 403 Forbidden error!

RewriteRule ^(.*)$ index.php [F,L]

#

########## End - Rewrite rules to block out some common exploits

[roncioffi]

I tried the fix.zip but it put "Warning" text at the top of all my pages. Unfortunately, I did not copy this warnings but they related to index.php and joomla.php.

This is how I installed the fix:

I put index.php in my root folder.
I put joomla.php in the includes folder.

Is this correct?

Any help would be appreciated. Thx.

[thediva]

Hello. We've installed the patch and it's not working for us. We can log in on the backend, but if we click on any of the menus or compnnents, we are kicked out back to the first log in screen. You can only do so much from the front end.

An suggestions would be helpful

[russian]

I applyed the patch... And it seemed to work at first, later today came back in and same thing.. logs me out on every excecustion performed after a preriod of roughly 20 sec of logging in.  Re-uploaded same files (overwritten) and seemed to work for about half hour-hour, tryed it again but doesnt work at all now.. WEIRD.. PLS help I cannot build my FIRST website with only 20 sec of worktime each login :/

[deleted user]

have you read this:
http://tech.amikelive.com/node-41/compr ... omla-1013/

[Martle1]

I can't seem to unpack the fix as it reckons it's an unknown format or corrupt. Is there another copy somewhere?

Thanks

[user deleted]

Martle, check the 1.0 upgrade forum, there is a sticky from me with the patch attached.

[Martle1]

Martle, check the 1.0 upgrade forum, there is a sticky from me with the patch attached.

Yeah tried that already and that download link doesn't do anything http://forum.joomla.org/index.php/topic,200725.0.html.

Not having much luck with this. 

[user deleted]

If you want, I can look up your mail address and send the fix.zip to you.

[Martle1]

If you want, I can look up your mail address and send the fix.zip to you.

That would be really good of you Rob.

Thanks

[Martle1]

Thanks for sending me the fix Robin.

I applied it but unfortunately it didn't get rid of my strange problem http://forum.joomla.org/index.php?topic=249573.0.

Oh well, it was worth a try. 

Thanks again.

[ekiwibird]

Robs, your deserve a big thanks.

Not only it solved my troubls, it makes my life much enjoyable.

[ikramhassan]

Can somebody helpme...

My Fireboard has crashed after my hosting company upgrade the webserver from Apache 1.3 to Apache 2.2.4 Any body knows what I have to do now. BELOW IS WHAT I GET WHEN I Click to view the content in fireboard. PLEASE HELP...

Notice: Undefined variable: leaf in /home/fiescom/public_html/components/com_fireboard/template/default/view.php on line 516

Notice: Trying to get property of non-object in /home/fiescom/public_html/components/com_fireboard/template/default/view.php on line 516

Notice: Undefined index: karmaminus in /home/fiescom/public_html/components/com_fireboard/template/default/view.php on line 717

Notice: Undefined index: karmaplus in /home/fiescom/public_html/components/com_fireboard/template/default/view.php on line 730

Notice: Undefined variable: msg_online in /home/fiescom/public_html/components/com_fireboard/template/default/view.php on line 820

Notice: Use of undefined constant _FB_NOGENDER - assumed '_FB_NOGENDER' in /home/fiescom/public_html/components/com_fireboard/template/default/view.php on line 942

Notice: Undefined variable: badwords in /home/fiescom/public_html/components/com_fireboard/template/default/view.php on line 1044

[mikaelfs]

Can somebody helpme...

My Fireboard has crashed after my hosting company upgrade the webserver from Apache 1.3 to Apache 2.2.4 Any body knows what I have to do now. BELOW IS WHAT I GET WHEN I Click to view the content in fireboard. PLEASE HELP...

Notice: Undefined variable: leaf in /home/fiescom/public_html/components/com_fireboard/template/default/view.php on line 516

Notice: Trying to get property of non-object in /home/fiescom/public_html/components/com_fireboard/template/default/view.php on line 516

Notice: Undefined index: karmaminus in /home/fiescom/public_html/components/com_fireboard/template/default/view.php on line 717

Notice: Undefined index: karmaplus in /home/fiescom/public_html/components/com_fireboard/template/default/view.php on line 730

Notice: Undefined variable: msg_online in /home/fiescom/public_html/components/com_fireboard/template/default/view.php on line 820

Notice: Use of undefined constant _FB_NOGENDER - assumed '_FB_NOGENDER' in /home/fiescom/public_html/components/com_fireboard/template/default/view.php on line 942

Notice: Undefined variable: badwords in /home/fiescom/public_html/components/com_fireboard/template/default/view.php on line 1044

it's not a big deal. it's just your host now changing the error reporting level. you can ask your host to change it to default value E_ALL ^ E_NOTICE or add line in your .htaccess for php.ini config directive (in case directory level overwriting is enabled by your host).

[speedscot]

Just want to say a big thank you - I installed joomlaxplorer and had the session problem, one quick search of the forum brought me here, patch applied and all seems ok now.  Many thanks for your work and dedication here.

[zupidupi]

Hi folks,

I'm having the same problem as all the other guys here. I installed JoomFish and got logged out every time I translated an item. I found the fix, installed it (copied the *.php-files) to their proper place and everything was peachy. Then I installed JACL, which replaced the new php-files with its own patched files. So, in order to avoid the JoomFish-problems I went thoroughly through index.php and joomla.php and did the changes from the fix to the JACL-patched file. Twice. With the same result.

My doubly patched file worked for a while, but now I get the 'Invalid Session'-message when I try to login. Luckily I saved copies of all my previous *.php-files, and was able to restore my installation (to various states). But, this is an awful hassle and not the way I'd like to run my CMS.

So, my actual question is: Has anybody managed to whip up a working combo of JACL and JoomFish? If so, I'd be more than happy to get a copy of it.

Thx in advance.

  Mike

[mon3ko]

This is my first post ever.Thank you ALL. My issue was related to eXplorer also and after applying the provided patch everything seems to be working fine now. Oohooh! 

Keep up the good work!

[airton]

I tried the fix.zip but it put "Warning" text at the top of all my pages. Unfortunately, I did not copy this warnings but they related to index.php and joomla.php.

This is how I installed the fix:

I put index.php in my root folder.
I put joomla.php in the includes folder.

Is this correct?

Any help would be appreciated. Thx.

Please, try to read ALL the posts. The answer is just above your head (actually a couple of posts before yours).
Look at this: http://forum.joomla.org/index.php/topic ... msg1140247

Good Luck!

[petrovkg]

Fatal error: Call to undefined method mosMainFrame::getbasepath() in C:\Program Files\wamp\www\administrator\components\com_joomfish\install.joomfish.php on line 42


Please help,.. im gone crazy....

[user deleted]

Fatal error: Call to undefined method mosMainFrame::getbasepath() in C:\Program Files\wamp\www\administrator\components\com_joomfish\install.joomfish.php on line 42


Please help,.. im gone crazy....

What are you trying to do, and which version of Joomla! are you using?

[Cebby]

RobS,

JACL Modifies the existing Joomla.php file in the includes folder.

Does the re-worked Joomla.php file in the includes file cause problems with JACL ? if so, what lines of code do I have to update ?

Many thanks,

Webasylum.

As a foot note, I noticed that when JACL is installed - it provides clear statements of where it has hacked the Joomla.php file !  Excellent, so using any text editor it was easy to search through the working JACL'd Joomla.php file for its hack entries and copy those pieces of code over into the matching code points in the Hotfix's Joomla.php file.  Note! Always worth saving copies of existing files before merging such pieces of code so you can get back to the start if you mess things up!

Now I have the Hotfix working with eXtplorer and JACL as it should I think inside Joomla. :P

Wink, wink, nudge, nudge - sure would be great if a hot fixed JACLPlus joomla.php file was made available...

EDIT:  BTW, I'm not just lazy, I can't get the joomlacode.org site links to work (those showing the file hot fix file alterations)

[petrovkg]

What are you trying to do, and which version of Joomla! are you using?

joomla 1.0.13.  /  joomfish 1.8.2  /

i tried everything and i really don't know what is the problem!?!?

[doctorfranken]

drfranken: programador

para solucionar el problema en las versiones spanish de joomla 1.0.13, hay que instalar los dos parches el de Robs y el que viene en la pagina de virtuemart


estos dos ficheros:
fix.zip

en fix.zip vienen
administrator/index.php
includes/joomla.php

y en

Joomla!_1.0.13_SessionFix.zip
administrator/index2.php

reemplazando estos archivos he conseguido solucionar el problema.

thanks Robs !

[petrovkg]

Soy de Serbia. ¿Mi inglés es bastante malo y usted está probando mi español!? Por favor...
No. que no ayudó en mi caso. ¿Substituí todos los archivos y nada error es igual!?


I'm from Serbia. My English is enough bad and you are testing my Spanish!? Please...
No. that didn't help in my case. I replaced all of the files and nothing error is same!?

Fatal error:
Call to undefined method mosMainFrame::getbasepath() in C:\Program Files\wamp\www\administrator\components\com_joomfish\install.joomfish.php on line 42

[HelixLee]

Thanks for much! I was so upset at first, now u save me  thank you thank you!!!1

[jana307]

hi to all,


well I also have problems accessing admin panel - it keeps saying 'invalid session'. I tried many of the solutions posted here, the fix.zip doesn't work for me.

but there is one important thing - my language file has charset UTF-8 and is also saved like that through Notepad, so that my site works fine with specific characters. Why is this important? because if i change charset to for example iso8859-1, admin panel lets me in!!! and I can login just fine. but then frontend is not showing characters in the correct way. so either frontend is showing right chars and backend is not accessible, or vice versa.

any idea what is not compatible here?! i would really be greatful for any help.


cheers,
netja