8
I know this is marked answered for 8 months, but here is an answer without any add-ons needed, which is in the original question.
Set template access for guests to off. Have it load a login template instead.
In the login template do this for the login form:
{exp:member:login_form return="{segment_1}/{segment_2}/{segment_3}"}
What I like about this ...
6
Try adding the following and change the cookie prefix:
$config['cookie_domain'] = "";
$config['cookie_path'] = "";
$config['cookie_prefix'] = "";
$config['admin_session_type'] = "s";
$config['user_session_type'] = "c";
$config['require_ip_for_login'] = "n";
$config['require_ip_for_posting'] = "n";
$config['secure_forms'] = "n";
6
Big thanks to Joel Bradbury for solving this one. I needed to add
$config['disable_csrf_protection'] = 'y';
to my config. Here's why:
It'll be because the tokens have been generated on a different base domain, and then it's moved and gotten stuck. Normally they're regenerated when they're detected as expired, but if it see's them as not expired, but ...
6
Some more googling and I found the answer here. The issue is with Structure and setting it to redirect to structure on login.
I finally found out that Structure 3.3.1 is the culprit when you set
it to redirect to Structure on login. You can get past it by editing
the config file and change $config['allow_extensions'] = 'y'; to
$config['...
5
I would suggest building a simple API module within the EE installation.
You've found the Auth library which should do exactly what you need, it's just a matter of exposing it, because there really isn't an easy way to take EE's authentication scheme out of EE.
So once you create a module, it'd simply be a matter of setting up an action ID within the ...
4
Silly me, I hadn't copyied up my new version of the themes folder. Hopefully this will be of help to someone else with a short-term memory!
4
Try adding these lines on the bottom of your expressionengine/config/config.php file:
$config['cookie_prefix'] = '';
$config['cookie_path'] = '';
$config['cookie_domain'] = '';
$config['user_session_type'] = 'c';
$config['admin_session_type'] = 's';
4
Use the Structure global variable {structure:page:uri} which is the same as EE's native "page_url" variable.
4
Adding another OR should work:
{if author_id == logged_in_member_id OR
logged_in_group_id == "1" OR
logged_in_group_id == "6"
}
Edit This Page ⇑
{/if}
4
I finally found out that Structure 3.3.1 is the culprit when you set it to redirect to Structure on login. You can get past it by editing the config file and change $config['allow_extensions'] = 'y'; to $config['allow_extensions'] = 'n';
3
Problem solved. If you are already logged in and log in again the return does not WORK
3
You can query the exp_sessions table, where you can see both the ip_address and member_id for each session. Multiple sessions from wildly different IPs would be a cue that an account was being shared widely.
3
Your best bet would be to attempt to repair the table via a database management utility outside of the EE control panel. Does your web host offer anything like a PHPMyAdmin interface, or do you have any experience with standalone MySQL clients like Sequel Pro? Those utilities should expose table repair functionality. I'd start there first.
Before you ...
3
To me that looks like a JS conflict with a cp add-on like Devot:EE monitor or a straight out EE theme error. Presumably on a new entry screen you'll see the file manager modal down there too.
Try replacing/re-uploading the themes folder for EE, updating the accessories to latest (or any extensions which modify the CP JS), then clear your browser cache.
3
If you get in touch with Travis at Structure, there's a BETA which will resolve the 'redirect to structure on login' with 2.8x.
3
Create a hidden template that is just the logged in username only. Then load it in via jquery ajax .load(); Once login is complete as well.
if (event.success) {
member_favourites = "5";
//do something
$("div#username").load("_username.html");
}
3
The "This site is currently unavailable" error suggests to me the IP addresses or usernames or something has been added to the "banned" list. This is how you check and fix this.
--------->>>>>>>> BEFORE YOU PROCEED... BACK UP YOUR DATABASE
--------->>>>>>>> THEN BACK THE DATABASE UP AGAIN
=============================
Go into the exp_sites table in the ...
2
If you remove this parameter -
error_handling="inline"
you should see what default errors are causing the login to fail in the default EE error page - should help you fix the error.
2
Check out the Hidden Configuration Variables page in the User Guide. You can adjust the $config['cp-session-ttl'] = xx; variable to extend the admin session length.
2
EE 2.4, in libraries/Template.php on line 2929 we have
if (isset($this->EE->session->userdata[$val]) AND ($val == 'group_description' OR strval($this->EE->session->userdata[$val]) != ''))
line 226 in your code, try to add "0,":
$EE_login->session->userdata['screen_name'] = $query->row(0,'screen_name');
$EE_login-...
2
Change the Control Panel Session type to Cookies Only: http://ellislab.com/expressionengine/user-guide/cp/admin/security_settings.html
This will get a Remember Me checkbox showing on the login screen.
2
I think, Customer Account Number would be unique for each member so based on the Customer Account Number, the member id can be fetched. That member id can be used for manually login a member.
You should see here: Manually login a member in ExpressionEngine
There is another way also. As you can get member's username also with Customer Account Number so just ...
2
This is what happens anyway (at least with Super Admin accounts). Maybe the more recent versions of EE introduce an extra level of security but I just tested this on a site running 2.6.1 and logging in on the front end also allowed me to access the CP without having to log in again.
2
Try disabling extensions and turn on debugging. Could be a PHP error getting in the way of the login.
Also, I'd try the login in a browser you don't use often to eliminate a browser cookie issue. Chrome is not exactly good about letting go of cache I find.
2
This was a silly oversight after a long week of coding. Upon login the website redirected with a prefix of "www" where the rest of the site does not use this.
Fixed with WWW resolve in .htaccess
2
Just wanted to comment that adding
$config['cp_session_type'] = 's';
worked for me too.
2
I have no idea what your actual setup is, but I general find that a best practice is to utilize embeds for control features as well as consistency. Here is an example: Two template groups, one call embeds, one called pages.
Embeds
index.html (unused)
_header.html
_footer.html
Pages
index.html
random_template.html
Your pages template will all look like ...
2
I've created a really basic extension to bypass the default message. It redirects to an account page on login and the home page on logout but this could be modified to point to any URL (i.e. a custom message landing page)
I've included a link to the download but should that expire you'll need to copy/save these two files into system/user/addons/loginbypass/
...
1
It turned out to be a problematic entry into the sessions table by CartThrob, so removing it was a quick fix.
This is within the order confirmation cartthrob tab(post-payment).
(You need output stage php enabled, as {member_id} is a CartThrob tag)
db->delete(
'exp_sessions',
array(
'member_id' => '{member_id}'
)
);
...
1
I found the culprit to be Zoo Flexible Admin. More here
Only top voted, non community-wiki answers of a minimum length are eligible
