| Author | Message | ||
     Rex Mottershead (fortyniner) Junior Member Username: fortyniner Post Number: 8 Registered: 12-2007 Posted From: 91.125.48.182 Rating: N/A |
Hi Frank I seem to have suddenly developed a problem with passwords for Mailresponder Pro v1.1. Each time I try to open the script I'm told the password is incorrect. I send for a new one and use that, which gets me in, but when I try to do anything I get the same message. I then have to send for yet another password before I can proceed. Next time I go to open the script, the cycle repeats. I am not having problems with any other scripts as far as I can tell. Something is obviously very wrong. Please advise. Regards. | ||
| Rex Mottershead (fortyniner) Junior Member Username: fortyniner Post Number: 9 Registered: 12-2007 Posted From: 91.125.48.182 Rating: N/A |
Sorry - just realised my post is in the wrong subsection. Can you move it to Mailsponder Pro support please? | ||
| Frank Bauer (admin) Board Administrator Username: admin Post Number: 53 Registered: 04-2002 Rating: N/A |
Hi Rex, No worries... I moved it. When did this start and how long did it work properly before this started? Can you ask your web host if they have recently updated Perl? Or something in regard to how encryption is handled on your server? Sincerely, Frank Bauer ============================================================ Would you like more... ? Scripts & Service for Your Web Business http://www.add2it.com ...Helping you succeed online... ============================================================ | ||
| Rex Mottershead (fortyniner) Junior Member Username: fortyniner Post Number: 10 Registered: 12-2007 Rating: N/A |
Hi Frank The script (various versions) has been working fine for about 3 years. I'll ask my web hosts about any changes to Perl or encryption methods but I think all my other scripts are working OK. I'll let you know when I've heard from them. Regards, Rex | ||
| Frank Bauer (admin) Board Administrator Username: admin Post Number: 54 Registered: 04-2002 Rating: N/A |
Hi Rex, Which other Add2it scripts are you using on the same server? Sincerely, Frank Bauer ============================================================ Would you like more... ? Scripts & Service for Your Web Business http://www.add2it.com ...Helping you succeed online... ============================================================ | ||
| Rex Mottershead (fortyniner) Member Username: fortyniner Post Number: 11 Registered: 12-2007 Rating: N/A |
Only Mailsponder is installed at the moment. Regards, Rex | ||
| Frank Bauer (admin) Board Administrator Username: admin Post Number: 55 Registered: 04-2002 Rating: N/A |
Hi Rex, So the other working scripts are not Add2it scripts and might use different methods to encrypt their passwords? Sincerely, Frank Bauer ============================================================ Would you like more... ? Scripts & Service for Your Web Business http://www.add2it.com ...Helping you succeed online... ============================================================ | ||
| Rex Mottershead (fortyniner) Member Username: fortyniner Post Number: 12 Registered: 12-2007 Rating: N/A |
Hi Frank That's right, no other Add2it scripts. I have an exit script that collects comments and a simple tracking script (AXS) but both of these have co-existed with Mailsponder for a long time, and nothing new has been added recently. By the way, yesterday's password opened the script today (a 'confirmed' message appeared briefly) but as soon as I tried to find a subscriber I got the error message and had to get another password sent before I could use this function. Regards, Rex | ||
| Frank Bauer (admin) Board Administrator Username: admin Post Number: 56 Registered: 04-2002 Rating: N/A |
Hi Rex, Weird... what has your web host replied to the fact that is used to work so long and suddenly stopped working without you changing the script or settings? Sincerely, Frank Bauer ============================================================ Would you like more... ? Scripts & Service for Your Web Business http://www.add2it.com ...Helping you succeed online... ============================================================ | ||
| Rex Mottershead (fortyniner) Member Username: fortyniner Post Number: 13 Registered: 12-2007 Rating: N/A |
Hi Frank My web host people have offered to take a look at the scripts, but they do not have any suggestions about why the password problem has arisen (its still going on - I've had to request a dozen or more new passwords so far). Perl was recently updated to version v5.8.8 but they have checked the error logs for Add2It but found no obvious problems. Should I just try re-installing the whole script using the 'upgrade' process? Regards, Rex | ||
| Frank Bauer (admin) Board Administrator Username: admin Post Number: 57 Registered: 04-2002 Rating: N/A |
Hi Rex, Reinstalling the script will not help as the problem is not the script itself... more likely it's the combination with Perl 5.8.8. I just checked here and we use Perl version 5.8.7 without any problems. See, what is happening for is simple... if the encrypted version of the password you entered doesn't match the encrypted password saved, you can't login. # Where is the salt number located in the encrypted password? its usually at substr(0,2) # but may be different on different systems, some sytems are set to substring(3,2) $first_sub = 0; $sec_sub = 2; # change this to $salt = "amp"; if all else fails. @c = ('a'..'z', 'A'..'Z', '0'..'9','.','/'); $salt = $c[rand(@c)].$c[rand(@c)]; $salt=substr($config{'adminpass'},$first_sub,$sec_sub); $temp=crypt($FORM{'pass'},$salt); To login, $temp must equal $config{'adminpass'}. $config{'adminpass'} is the encrypted password saved. $FORM{'pass'} is the password you entered on login. Please try changing in the variables.pl... $first_sub = 0; $sec_sub = 2; to: $first_sub = 3; $sec_sub = 2; Or try changing... $salt = $c[rand(@c)].$c[rand(@c)]; to: $salt = "amp"; Sincerely, Frank Bauer ============================================================ Would you like more... ? Scripts & Service for Your Web Business http://www.add2it.com ...Helping you succeed online... ============================================================ | ||
| Rex Mottershead (fortyniner) Member Username: fortyniner Post Number: 14 Registered: 12-2007 Rating: N/A |
Hi Frank OK, thanks. The odd thing is that the script is accepting the most recent password to open the admin page, but then says the password is incorrect when I try to use a function such as the subscriber counter. It is at that point I have to get a new password, which then both opens the admin page and allows further operations to be carried out. The cycle then repeats next time I try to open the admin page in a new browser session. Before I start mucking around with the script, is this consistant with what you think may be happening? (I don't want to screw things up any more than they are now!) Regards, Rex | ||
| Frank Bauer (admin) Board Administrator Username: admin Post Number: 58 Registered: 04-2002 Rating: N/A |
Hi Rex, Hmmm... so the password works on login, but not if you click on any of the button is the admin area? Please try this and let me know the result... Once the above happens... 1. Close your browser, open it again, login again and click again on that button. Does it work now? If not... 2. Request a new password, close your browser, reopen it and log into the admin area with the new password. Does it work now? Sincerely, Frank Bauer ============================================================ Would you like more... ? Scripts & Service for Your Web Business http://www.add2it.com ...Helping you succeed online... ============================================================ | ||
| Rex Mottershead (fortyniner) Member Username: fortyniner Post Number: 15 Registered: 12-2007 Rating: N/A |
Hi Frank 1. Close your browser, open it again, login again and click again on that button. Does it work now? No - the pasword which was previously accepted is now rejected If not... 2. Request a new password, close your browser, reopen it and log into the admin area with the new password. Does it work now? Yes! The new p/w is accepted to open the admin page, and I can use any function button. I closed the browser and repeated the cycle and the most recent p/w still seems to work. I think you've cracked it, but what on earth is happening? Regards, Rex | ||
| Frank Bauer (admin) Board Administrator Username: admin Post Number: 59 Registered: 04-2002 Rating: N/A |
Hi Rex, Could it be that the same password works the whole day and then the next day not anymore? Sincerely, Frank Bauer ============================================================ Would you like more... ? Scripts & Service for Your Web Business http://www.add2it.com ...Helping you succeed online... ============================================================ | ||
| Rex Mottershead (fortyniner) Member Username: fortyniner Post Number: 16 Registered: 12-2007 Rating: N/A |
Hi Frank I'll let you know what happens tomorrow... Regards, Rex | ||
| Rex Mottershead (fortyniner) Member Username: fortyniner Post Number: 17 Registered: 12-2007 Rating: N/A |
Hi Frank Tried to get back in today with the most recent password (the one that worked yesterday) but we seem to be back to the usual scenario (lets me in first time, then rejects the password - can't get back in until a new password is sent). Regards, Rex | ||
| Frank Bauer (admin) Board Administrator Username: admin Post Number: 60 Registered: 04-2002 Rating: N/A |
Hi Rex, So, every new password just lasts for the day before it expires? Very weird. What's even weirder is that you can still use it to login, but not to choose functions once you are logged in. The subroutine is the same for checking the password during login and when accessing the functions. So either the entered password $FORM{'pass'} or the saved password $config{'adminpass'} must change between login and access of the function. Question... when you login successfully and then can't access a function... have you tried to close the browser without requesting a new password and then tried to login again? Can you still login then? Or not anymore? Sincerely, Frank Bauer ============================================================ Would you like more... ? Scripts & Service for Your Web Business http://www.add2it.com ...Helping you succeed online... ============================================================ | ||
| Rex Mottershead (fortyniner) Member Username: fortyniner Post Number: 18 Registered: 12-2007 Rating: N/A |
Hi Frank I got a new password today and this is now both logging in and opening function pages at the moment, like on Saturday. I've tried shutting down the browser and logging back in but all still seems OK! I'll try again tomorrow and let you know what happens then. Regards, Rex | ||
| Rex Mottershead (fortyniner) Member Username: fortyniner Post Number: 19 Registered: 12-2007 Rating: N/A |
Hi Frank I've just got back after attending to a family emergency which took me away from my computer. Unfortunately the script now seems to be back as it was, i.e., is accepting a password once, then rejecting it in the same session. It can be 'reset' as you suggested on the 23rd, and then works for a bit, but reverts after a day or so. Regards, Rex |
