ok sure, thanks for the reply. Ok here it is (sorry for the long post).
If I try to go to:
http://smeserver/infocentralthen I get:
-----------------------------------------------------------------------------------
InfoCentral will not operate with PHP's register_globals option turned on.
"; echo "This is for your own protection as the use of this setting could entirely undermine
"; echo "all security. You need to either turn off register_globals in your php.ini or else
"; echo "configure your web server to turn off register_globals for the InfoCentral directory."; exit; } // Include the function library require
"Include/Config.php"; $bSuppressSessionTests = true; require "Include/Functions.php"; // Get the UserID out of the form results if
(isset($_POST["User"])) { $iUserID = FilterInput($_POST["User"],'int'); } else { $iUserID = 0; } // Is the user requesting to logoff or timed out?
if (isset($_GET["Logoff"]) || isset($_GET['timeout'])) { $_COOKIE = array(); $_SESSION = array(); session_destroy(); } // Initialize the variables
$sErrorText = ""; // Has the form been submitted? if ($iUserID > 0) { // Get the information for the selected user $sSQL = "SELECT * FROM user_usr
INNER JOIN person_per ON usr_per_ID = per_ID WHERE usr_per_ID = " . $iUserID; $rsQueryResult = RunQuery($sSQL);
extract(mysql_fetch_array($rsQueryResult)); // Block the login if a maximum login failure count has been reached if ($iMaxFailedLogins > 0 &&
$usr_FailedLogins >= $iMaxFailedLogins) { $sErrorText = "
" . gettext("Too many failed logins: your account has been locked. Please contact an administrator."); } // Does the password match? elseif
($usr_Password != md5(strtolower($_POST["Password"]))) { // Increment the FailedLogins $sSQL = "UPDATE user_usr SET usr_FailedLogins =
usr_FailedLogins + 1 WHERE usr_per_ID = " . $iUserID; RunQuery($sSQL); // Set the error text $sErrorText = " " . gettext("Invalid password"); }
else { // Set the LastLogin and Increment the LoginCount $sSQL = "UPDATE user_usr SET usr_LastLogin = '" . date("Y-m-d H:i:s") . "',
usr_LoginCount = usr_LoginCount + 1, usr_FailedLogins = 0 WHERE usr_per_ID = " . $iUserID; RunQuery($sSQL); // Set the UserID $_SESSION['iUserID']
= $usr_per_ID; // Set the Actual Name for use in the sidebar $_SESSION['UserFirstName'] = $per_FirstName; // Set the Actual Name for use in the
sidebar $_SESSION['UserLastName'] = $per_LastName; // Set the pagination Search Limit $_SESSION['SearchLimit'] = $usr_SearchLimit; // If user has
administrator privilege, override other settings and enable all permissions. if ($usr_Admin) { $_SESSION['bAddRecords'] = true;
$_SESSION['bEditRecords'] = true; $_SESSION['bDeleteRecords'] = true; $_SESSION['bMenuOptions'] = true; $_SESSION['bManageGroups'] = true;
$_SESSION['bFinance'] = true; $_SESSION['bNotes'] = true; $_SESSION['bCommunication'] = true; $_SESSION['bAdmin'] = true; } // Otherwise, set the
individual permissions. else { // Set the Add permission $_SESSION['bAddRecords'] = $usr_AddRecords; // Set the Edit permission
$_SESSION['bEditRecords'] = $usr_EditRecords; // Set the Delete permission $_SESSION['bDeleteRecords'] = $usr_DeleteRecords; // Set the Menu
Option permission $_SESSION['bMenuOptions'] = $usr_MenuOptions; // Set the ManageGroups permission $_SESSION['bManageGroups'] = $usr_ManageGroups;
// Set the Donations and Finance permission $_SESSION['bFinance'] = $usr_Finance; // Set the Notes permission $_SESSION['bNotes'] = $usr_Notes; //
Set the Communications permission $_SESSION['bCommunication'] = $usr_Communication; // Set the Admin permission $_SESSION['bAdmin'] = false; } //
Set the FailedLogins $_SESSION['iFailedLogins'] = $usr_FailedLogins; // Set the LoginCount $_SESSION['iLoginCount'] = $usr_LoginCount; // Set the
Last Login $_SESSION['dLastLogin'] = ConvertMySQLDate($usr_LastLogin); // Set the Workspace Width $_SESSION['iWorkspaceWidth'] =
$usr_WorkspaceWidth; // Set the Base Font Size $_SESSION['iBaseFontSize'] = $usr_BaseFontSize; // Set the Style Sheet $_SESSION['sStyle'] =
$usr_Style; // Create the Cart $_SESSION['aPeopleCart'] = array(); // Create the variable for the Global Message $_SESSION['sGlobalMessage'] = "";
// Set whether or not we need a password change $_SESSION['bNeedPasswordChange'] = $usr_NeedPasswordChange; // Initialize the last operation time
$_SESSION['tLastOperation'] = time(); $aHTTPports = explode(',', $aHTTPports); $aHTTPSports = explode(',', $aHTTPSports); if
(in_array($_SERVER['SERVER_PORT'],$aHTTPports)) { $_SESSION['bSecureServer'] = false; } elseif (in_array($_SERVER['SERVER_PORT'],$aHTTPSports)) {
$_SESSION['bSecureServer'] = true; } else { echo "Invalid server port number. Check Config.php"; exit; } $_SESSION['iServerPort'] =
$_SERVER['SERVER_PORT']; // If PHP's magic quotes setting is turned off, we want to use a workaround to ensure security.
$_SESSION['bHasMagicQuotes'] = get_magic_quotes_gpc(); // Redirect to the Menu Redirect("Menu.php"); } } // Get all the users in the system $sSQL
= "SELECT per_FirstName, per_LastName, per_Title, per_Suffix, per_MiddleName, user_usr.* FROM user_usr, person_per WHERE per_ID = usr_per_ID ORDER
BY per_LastName"; $rsUsers = RunQuery($sSQL); // Set the page title and include HTML header ?>
Your previous session timed out. Please login again.
[_______________________________________________________________________________________________________________________________________________________
.....................................................................................................................................]
__________
<?php>
-----------------------------------------------------------------------------------
NB register_globals is definitely off. That was my first problem, for which I followed the recommendations in the Infocentral forum.
And when I go diretly to:
http://smeserver/infocentral/Default.phpthen I get:
-----------------------------------------------------------------------------------
Cannot execute query.
SELECT per_FirstName, per_LastName, per_Title, per_Suffix, per_MiddleName, user_usr.* FROM user_usr, person_per WHERE per_ID = usr_per_ID ORDER BY
per_LastName
Access denied for user: 'www@localhost' (Using password: NO)
-----------------------------------------------------------------------------------
I am using SME Server 6.5 RC1, fresh install with no mods and 2 users. And also using InfoCentral-1.2.6.tar.gz
thanks again,
w4tch3r
17 Replies
3346 Views