8
I know this is marked answered for 8 months, but here is an answer without any add-ons needed, which is in the original question.
Set template access for guests to off. Have it load a login template instead.
In the login template do this for the login form:
{exp:member:login_form return="{segment_1}/{segment_2}/{segment_3}"}
What I like about this ...
6
Found it.
Turned out to be a setting left over in config.php.
When the original site was constructed, I was using one of those temporary URLs that hosting companies often provide for viewing sites before domains are pointed at them.
The original setting for the temporary URL was still in the config.php setting for 'cp_url'.
Apparently, changing the ...
6
Try adding the following and change the cookie prefix:
$config['cookie_domain'] = "";
$config['cookie_path'] = "";
$config['cookie_prefix'] = "";
$config['admin_session_type'] = "s";
$config['user_session_type'] = "c";
$config['require_ip_for_login'] = "n";
$config['require_ip_for_posting'] = "n";
$config['secure_forms'] = "n";
6
Big thanks to Joel Bradbury for solving this one. I needed to add
$config['disable_csrf_protection'] = 'y';
to my config. Here's why:
It'll be because the tokens have been generated on a different base domain, and then it's moved and gotten stuck. Normally they're regenerated when they're detected as expired, but if it see's them as not expired, but ...
6
Some more googling and I found the answer here. The issue is with Structure and setting it to redirect to structure on login.
I finally found out that Structure 3.3.1 is the culprit when you set
it to redirect to Structure on login. You can get past it by editing
the config file and change $config['allow_extensions'] = 'y'; to
$config['...
5
Here's how I'm doing this using Profile:Edit, which is an add-on. I assume Zoo Visitor will support something similar.
If you visit one of my news article pages, because it was linked in an email, at the top of that template I have:
{if logged_out}{redirect='/members/login/{segment_1}/{segment_2}'}{/if}
You could add all your segments there. The point is, ...
5
I would suggest building a simple API module within the EE installation.
You've found the Auth library which should do exactly what you need, it's just a matter of exposing it, because there really isn't an easy way to take EE's authentication scheme out of EE.
So once you create a module, it'd simply be a matter of setting up an action ID within the ...
4
Try adding these lines on the bottom of your expressionengine/config/config.php file:
$config['cookie_prefix'] = '';
$config['cookie_path'] = '';
$config['cookie_domain'] = '';
$config['user_session_type'] = 'c';
$config['admin_session_type'] = 's';
4
Might seem like a silly question, but are you sure you're looking at the correct database for the site? For example, do you have a development site/database/configuration file?
Cookie/Session problems will normally just bounce you to the homepage or back to the login screen. This sounds more like an actual problem authenticating the username/password which ...
4
Silly me, I hadn't copyied up my new version of the themes folder. Hopefully this will be of help to someone else with a short-term memory!
4
Use the Structure global variable {structure:page:uri} which is the same as EE's native "page_url" variable.
4
Adding another OR should work:
{if author_id == logged_in_member_id OR
logged_in_group_id == "1" OR
logged_in_group_id == "6"
}
Edit This Page ⇑
{/if}
4
I finally found out that Structure 3.3.1 is the culprit when you set it to redirect to Structure on login. You can get past it by editing the config file and change $config['allow_extensions'] = 'y'; to $config['allow_extensions'] = 'n';
3
Most likely because they are logged in with www.domain.com but visiting the cp with domain.com or visa versa.
The solution is to adjust the Cookie settings for the EE install. Specifically, set a Cookie Domain so the member's logged in session will be used across both URLs.
3
There are at least two add-ons which will allow the password reset to work as you described, with the user entering their own password:
FreeMember
See the reset_password tag
The Reset Password tag allows users to change their password directly,
after they click the link in their email.
OR
Securit:ee
See the forgot_password tag
Instead of resetting ...
3
You can query the exp_sessions table, where you can see both the ip_address and member_id for each session. Multiple sessions from wildly different IPs would be a cue that an account was being shared widely.
3
Problem solved. If you are already logged in and log in again the return does not WORK
3
Your best bet would be to attempt to repair the table via a database management utility outside of the EE control panel. Does your web host offer anything like a PHPMyAdmin interface, or do you have any experience with standalone MySQL clients like Sequel Pro? Those utilities should expose table repair functionality. I'd start there first.
Before you ...
3
To me that looks like a JS conflict with a cp add-on like Devot:EE monitor or a straight out EE theme error. Presumably on a new entry screen you'll see the file manager modal down there too.
Try replacing/re-uploading the themes folder for EE, updating the accessories to latest (or any extensions which modify the CP JS), then clear your browser cache.
3
If you get in touch with Travis at Structure, there's a BETA which will resolve the 'redirect to structure on login' with 2.8x.
3
Create a hidden template that is just the logged in username only. Then load it in via jquery ajax .load(); Once login is complete as well.
if (event.success) {
member_favourites = "5";
//do something
$("div#username").load("_username.html");
}
3
The "This site is currently unavailable" error suggests to me the IP addresses or usernames or something has been added to the "banned" list. This is how you check and fix this.
--------->>>>>>>> BEFORE YOU PROCEED... BACK UP YOUR DATABASE
--------->>>>>>>> THEN BACK THE DATABASE UP AGAIN
=============================
Go into the exp_sites table in the ...
2
You can use [allow_multi_logins] => n in your config.php for this. Make sure it's in the same format as the other config items.
You can find the full list in the wiki, via the Wayback Machine: EE 2 Config Overrides.
2
First, you'd have to set up your upload directory to be below the web root, so your structure might look like this:
public_html/
private/
private/uploads/
Make a template for serving up these protected images, say protected/images is your template group / template name. Set your upload directory's URL to this template: /protected/images/
In your template, ...
2
You can edit the copy in the Message Pages area of the Control Panel... specifically edit the "Password Reset Notification" template.
Control Panel Location: Design ‣ Message Pages
2
Do you have a php enabled template that's publicly accessible? (Or that can be made publicly accessible?)
If so the following code on the template should log you in as whatever member_id you specify.
$member_id = 1; // Or whatever your member ID is
$this->EE =& get_instance();
$this->EE->session->create_new_session($member_id);
2
Assets 2.1 is easily hackable, here's what you can do to restrict the file browser to the currently logged-in member's (standard ExpressionEngine) assets only:
First, add a 'member_id' column to the assets_files table:
ALTER TABLE `exp_assets_files` ADD `member_id` INT( 10 ) UNSIGNED NULL
Modify assets/sources/base_source.php (line 605) to add the ...
2
If you remove this parameter -
error_handling="inline"
you should see what default errors are causing the login to fail in the default EE error page - should help you fix the error.
2
Check out the Hidden Configuration Variables page in the User Guide. You can adjust the $config['cp-session-ttl'] = xx; variable to extend the admin session length.
2
Change the Control Panel Session type to Cookies Only: http://ellislab.com/expressionengine/user-guide/cp/admin/security_settings.html
This will get a Remember Me checkbox showing on the login screen.
Only top voted, non community-wiki answers of a minimum length are eligible
