joomla 2.5.18 login problems with new password paradigm

[krisskrossfw]

Hi,

After applying the 2.5.18 patch, i can not log in anymore.
Passwords are converted to bcrypt.

I get the error in my logs:

Code: Select all

PHP Warning:  is_readable(): open_basedir restriction in effect. File(/dev/urandom) is not within the allowed path(s): (/var/www/vhosts/site.com/:/tmp/) in /var/www/vhosts/site.com/httpdocs/libraries/phpass/PasswordHash.php on line 51

Message: You cannot access the private section of this site.


This is on a shared hosting server (Centos 6.5, PHP 5.3.3-26).

[TMDHosting]

You should contact the support team of your hosting provider and ask them if you can use the following binary file:

/dev/urandom

From the provided error it seems that you are unable to use the above binary file.

[krisskrossfw]

I downloaded the site on my local PC (Debian) I dont get any errors but the problem of inability to login persists. The thing is that this happens on some of the joomla sites that where upgraded to 2.5.18.

With clean vanilla installation everything is fine.

[Webdongle]

Then the problem is with a 3rd party extension.

[joomwork]

do you have a 3rd party security extension installed on your site?

[michele654]

Thanks so much for this post, even if it is older!!!! I've been fighting with my 2.5.28 to 3.3.6 upgrade and login problems, it was the LoginFailed Log extension. Disabled that through the database, and all seems well!