Can't login after site working for months

[newvision]

I installed CMSMS 1.11.8 on the server in February 2014 and have been able to use the site successfully since then. Yesterday, I went to revise the site and could not login with any of the usernames or passwords. I checked the DB and it shows the users/passwords but when I try to login, the login dialog box just shakes and then says username or password incorrect. If I click on the forgot password link and enter the user name, it shakes again and then says user not found.

How can I resolve this?

Thanks!

[Jo Morg]

http://docs.cmsmadesimple.org/troublesh ... d-recovery

For security upgrade ASAP.

Also http://docs.cmsmadesimple.org/general-i ... ring-cmsms

Just in case.
HTH

[newvision]

I reset the username and password. That still did not work.

Any other suggestions?

Thanks!

[Rolf]

Did you try another browser and computer?

If you have FTP access, delete all files in the folders /tmp/cache/ and /tmp/templates_c/ similar like *clear cache*

[newvision]

I did all the previous steps.
Cleared the cache/ tmp folders,etc.
I went into the db and added two new users including 'admin' with password 'admin' and that still didn't work.
I made sure that all the email addresses pointed to me.

I tried the forgot password option hoping i could get new username and password sent and it never recognizes the user. So the email is never sent.

I don't know what else to try.
Any suggetions? I need to get into my site.
Thanks

[paulbaker]

I went into the db and added two new users including 'admin' with password 'admin' and that still didn't work.

How did you "go into the db"? Did you use the database query in the first link Jo Marg gave you?

[newvision]

I went into the db through phpMyAdmin in the cpanel. Fund the table for users, added users and changed the email address

[Jo Morg]

I went into the db through phpMyAdmin in the cpanel. Fund the table for users, added users and changed the email address

As you already found out that wouldn't work...

The usernames and passwords are stored in the database. The passwords are encrypted/salted.

You need to follow the instructions on the link I gave you...

[newvision]

Thank you. I wasn't specific enough. I went to an MD5 Hash generator to create the encrypted passwords for the additional users and pasted those into the users table.

What I don't understand is why the old ones are not working at all.
In the db, I only added users, I did not delete existing ones.

Would it help just to restore from the backup I generated?
Would it help reinstall CMSMS?
Would it help to do an install-upgrade?

Thanks.

[newvision]

BTW, per your original comment, I ran this in phpMyAdmin:

update cms_users set password = (select md5(CONCAT(IFNULL((SELECT sitepref_value FROM cms_siteprefs WHERE sitepref_name = 'sitemask'),''),'mypassword'))) where username = 'AmyDKK'

it said one line had changed successfully (in green)

since the default, admin/admin no longer worked, i repeated the steps for that as well. Same result.

As far as the htacess is concerned, i am clueless.

[newvision]

cms_siteprefs show the username and password that I am using but when I use those login info, I get that the user is not found.

[Jo Morg]

I'm still not sure of exactly it is that you are doing. The table where the the username and password values is stored is cms_users.
I honestly recommend recovering a backup copy and start over by following only the steps on that link I gave you. It normally works flawlessly, unless the cms_siteprefs is also corrupted...

[newvision]

I go to the address bar and type in:
http://drkyre.com/admin

It brings up the CMS login panel.
I enter the username: "username" (that is not the real name)
I enter the password: "password" (that is not the real name)

I click on the submit button.
i get a message that the user is not found.

I checked the cms_siteprefs to verify that the username and password or correct.

I then click on the forgot passover link and another panel pops asking for username. I enter the username hit submit and get another message that there is no such user.

the default admin/admin does not work either. Setting a new user/password from the SQL statement does not work either.
I cannot get into the admin to edit the site.

I hope this is clear and you can understand what I am trying to do.

thanks!

[Jo Morg]

I checked the cms_siteprefs to verify that the username and password or correct.

As I said:

The table where the the username and password values is stored is cms_users.

You are looking at the wrong table, according to your own description of what you are doing.
Again: I strongly suggest to revert to a backup and try again. If, for some reason, the cms_siteprefs gets corrupted, the site mask value changes, etc, you won't be able to recover the admin login. It seems to me, from your explanation, that you have been trying to set values on both cms_users and cms_siteprefs by other ways than the recommended. At one point or another that will most likely fail.

[Rolf]

Do you use a kind of Admin security module? Something like IPLock...