Now more access to admin 2.2.9.1 install

[map_1961]

Hi.
Having this for the first time in 18 years of working with cmsms:
I can not access to admin any more of a 2.2.9.1 install with https after coming back to work after a week off. It was working fine at Feb. 25th to 27th. It's a mystery for me.

I already copied the password hex code from other installation database to this installation: result is no access.
I changed PhP 7.2 to 7.1: result is no access.
I added another user by database with a known hex pw: result is no access.
Trying to send a password by forgot password: doesn't work.

So i realy have a problem. Who has an idea how to solve?

Thx

MAP

[calguy1000]

If you have a problem that just appeared over a weekend, then maybe your host changed something.

If you have access to the database, AND you had properly setup the mail functions in CMSMS. Then you should ensure that the email address is proper in the database, and use the lost password functionality.

IF for some reason your email is not set up properly, then follow the lost password instructions in the docs site... it still works.

https://docs.cmsmadesimple.org/troubles ... d-recovery

[Rolf]

This video tutorial might help if the problem is a lost password
https://cmscanbesimple.org/blog/cms-mad ... d-recovery

Also try to clear your browser cache.

[map_1961]

Thx calguy.

I already called 1&1 - my provider. It seems that all is ok on the server.
I restored a file backup from March 5th. Even this does not help.

I will follow the link you posted beside i checked the mailfunction before i set the staging site to the live site.

Let you know about the outcome.
Thx for fast reply.
MAP

[map_1961]

I did as calguy anf Rolf proposed updating the user and password using the database comand line.
The result is - it makes me mad - that i get NO ACCESS.

Thx

MAP

[Rolf]

Tried to clear CMSMS cache too?

Delete the content of the folders using cPanel/Plesk/FTP:
/tmp/cache/
/tmp/templates_c
And try again...

[map_1961]

All cache cleared.
Another user inserted by DB (using salted pw from another installtion where th user works fine).

What ever i do: no access.
And even using another PC, using my smartphone.

Thx

MAP

[Rolf]

If you have an older - upgraded - CMSMS install, it might be you have still the previous needed path configuration lines in your config.php.
If the host changed your server, it is possible the paths are wrong now.

These are used/needed now: https://docs.cmsmadesimple.org/configur ... onfig-file

[map_1961]

Thx Rolf.

It worked before i left on Feb. 28th without problems. I i did no change on the files since that.
This is the config:
<?php
# CMS Made Simple Configuration File
# Documentation: /doc/CMSMS_config_reference.pdf
#
$config['dbms'] = 'mysqli';
$config['db_hostname'] = 'db77449xxxxxxxxxxx';
$config['db_username'] = 'dbxxxxxxx';
$config['db_password'] = 'xxxxxxx';
$config['db_name'] = 'db7xxxxxxx';
$config['db_prefix'] = 'cms_';
$config['timezone'] = 'Europe/Berlin';
$config['db_port'] = 3306;
$config['url_rewriting'] = 'mod_rewrite';
$config['admin_dir'] = 'nimda';
?>

So, my Admin dir is nimda. But i also change to admin (deleting this line) and renaming the folder by ftp. Even this makes no difference.
The outcome is that i get no access.

Should i provide ftp / db access?

The site works on PhP 7.2

Thx
MAP

[Rolf]

Do you use at this site a (failed) login plugin attached to an event?
Something like described here:
https://cmscanbesimple.org/blog/admin-f ... tification

PS. Also look at your servers error log, might give some clues...

[map_1961]

No, Rolf, i don't.

Thx for your kind reply.

MAP

[map_1961]

This is the .htaccess - but once again: it works propper when i last time worked on the site on Feb. 27th.:

Code: Select all

AddType x-mapp-php5.5 .php
AddHandler x-mapp-php5.5 .php 

AddType video/mp4 .mp4
AddType video/webm .webm
AddType video/ogg .ogv

# Attempt to override some php settings, these settings may be helpful on some hosts if your
# default configuration does not meet CMS's minimum requirements, and your host
# has given your account appropriate permissions
#php_value upload_max_filesize "10M"
#php_value session_save_path "tmp/cache"

#php_flag magic_quotes_gpc Off
#php_flag register_globals Off
#php_flag session.use_trans_sid Off

# changes made by Jo Morg
<IfModule mod_rewrite.c>

  Options +FollowSymLinks

  RewriteEngine on
  RewriteBase /
  
  RewriteCond %{HTTPS} =on
  RewriteRule ^ - [env=proto:https]
  RewriteCond %{HTTPS} !=on
  RewriteRule ^ - [env=proto:http]
  
  RewriteCond %{HTTPS} !=on
  RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]
  
  RewriteCond %{HTTP_HOST} !^www\. [NC]
  RewriteCond %{SERVER_ADDR} !=127.0.0.1
  RewriteCond %{SERVER_ADDR} !=::1
  RewriteRule ^ %{ENV:PROTO}://www.%{HTTP_HOST}%{REQUEST_URI} [R=301,L]
   
  # 301 Redirect all requests that don't contain a dot or trailing slash to
  # include a trailing slash
  # except for form POSTS
  RewriteCond %{REQUEST_URI} !/$
  RewriteCond %{REQUEST_URI} !\.
  RewriteCond %{REQUEST_METHOD} !POST$
  RewriteRule ^(.*) %{REQUEST_URI}/ [R=301,L,NE]

  # Rewrites urls in the form of /parent/child/
  # but only rewrites if the requested URL is not a file or directory
  RewriteCond %{REQUEST_FILENAME} !-f
  RewriteCond %{REQUEST_FILENAME} !-d
  RewriteRule ^(.+)$ index.php?page=$1 [QSA,NE]
</IfModule>
# end changes

<IfModule mod_deflate.c>
# Compress css, plaintext, xml, gif, and images in transport.
AddOutputFilterByType DEFLATE text/css text/plain text/xml image/gif image/jpeg image/png
</IfModule>

<IfModule mod_expires.c>
<FilesMatch "\.(ico|pdf|flv|jpg|jpeg|png|gif|js|css|swf)$">
# Set expires tags on various files... so that the browser wont attempt to reload them.
ExpiresActive On
ExpiresDefault "access plus 1 year"
<IfModule mod_header.c>
  # Setting cache control to public allowes proxy servers to cache the items too.
  Header set Cache-Control "public"
</IfModule>
</FilesMatch>
</IfModule>

---


MAP

[Rolf]

Looking at your config file and your remark about https, it could be a mixed content issue...
Try to add these lines to your config.php file:

Code: Select all

$config['root_url'] = 'https://www.website.de';
$config['admin_url'] = 'https://www.website.de/admin';

Clear cms and browser cache and try again using
https://www.website.de/admin

You can also try to rename .htaccess file for a moment...

PS or https://www.website.de/nimda in your case...

[map_1961]

Bingo Rolf. I am in!!!

Thank you.

How can it happen, that the backend access worked before and now with this changes config only?

Thx x 1.000.000 for your assistance

MAP

[map_1961]

Beside the mailer settings in admin are correct (test mail arrives) the fotgot pw function in backend login doesn't work.

Update: this works now, too.!!!!

Best regards

MAP