Page 1 of 1

File Picker pops up the login screen

Posted: Thu Aug 30, 2018 2:21 pm
by urheat
Hi,

suddenly if I try to add a link for example to the pdf/png file and try to access the File Picker, the login screen pops up. If I type the login information again, I can access the files and add the link. BUT if I try to submit, cancel or apply, the login screen pops up again and nothing is saved.

Tried to clear the cache.

Web Server error log:

Code: Select all

[Thu Aug 30 17:16:37.448223 2018] [lsapi:notice] [pid 10333] [client 84.249.48.70:38682] [host kettuki.fi] Backend log: PHP Notice:  Module  not found in memory. This could indicate that the module is in need of upgrade or that there are other problems in /biz/1/kettufi/html/kadmin/moduleinterface.php on line 54\n, referer: https://kettuki.fi/kadmin/login.php
----------------------------------------------

Cms Version: 2.2.8

Installed Modules:

AdminSearch: 1.0.4
CGExtensions: 1.61.1
CGSharedContent: 1.0.1
CGSmartImage: 1.22.2
CMSContentManager: 1.1.6
CMSMailer: 6.2.14
Captcha: 0.5.5
CmsJobManager: 0.1.3
DesignManager: 1.1.4
FileManager: 1.6.7
FilePicker: 1.0.3
FormBuilder: 0.8.1.6
Gallery: 2.3.2
MenuManager: 1.50.3
MicroTiny: 2.2.2
ModuleManager: 2.1.4
Navigator: 1.0.9
News: 2.51.4
Search: 1.51.5
Showtime2: 3.5.4
ThemeManager: 1.1.8

Config Information:

php_memory_limit:
max_upload_size: 64000000
url_rewriting: mod_rewrite
page_extension:
query_var: page
auto_alias_content: true
locale:
set_names: true
timezone: Europe/Helsinki
permissive_smarty: false

Php Information:

phpversion: 7.2.8
md5_function: On (True)
json_function: On (True)
gd_version: 2
tempnam_function: On (True)
magic_quotes_runtime: Off (False)
E_ALL: 6133
E_STRICT: 0
E_DEPRECATED: 0
test_file_timedifference: No time difference found
test_db_timedifference: No time difference found
create_dir_and_file: 1
memory_limit: 768M
max_execution_time: 90
register_globals: Off (False)
output_buffering: 4096
disable_functions:
open_basedir:
test_remote_url: Success
file_uploads: On (True)
post_max_size: 80M
upload_max_filesize: 64M
session_save_path: /opt/alt/php72/var/lib/php/session (1777)
session_use_cookies: On (True)
xml_function: On (True)
xmlreader_class: On (True)
check_ini_set: On (True)
curl: On

Performance Information:

allow_browser_cache: Off (False)
browser_cache_expiry: 60
php_opcache: On (True)
smarty_cache: Off (False)
smarty_compilecheck: Off (False)
auto_clear_cache_age: Off (False)
Server Information:

Server Software: Apache/2.4.26 (Red Hat)
Server Api: litespeed
Server Os: Linux 3.10.0-714.10.2.lve1.5.17.1.el6h.x86_64 On x86_64
Server Db Type: MySQL (mysqli)
Server Db Version: 5.6.37
Server Db Grants: Found a "GRANT ALL" statement that appears to be suitable

Permission Information:

tmp: /biz/1/kettufi/html/tmp (0755)
tmp_cache: /biz/1/kettufi/html/tmp/cache (0755)
templates_c: /biz/1/kettufi/html/tmp/templates_c (0755)
modules: /biz/1/kettufi/html/modules (0755)
uploads: /biz/1/kettufi/html/uploads (0755)
File Creation Mask (umask): /biz/1/kettufi/html/tmp/cache (0755)
config_file: 0644
----------------------------------------------

Re: File Picker pops up the login screen

Posted: Fri Aug 31, 2018 10:13 am
by velden
Looks like your session is invalidated when calling the popup (which is actually is a new call to CMSMS using ajax).

I'd check some stuff:

- did your hosting provider change something, maybe enabled mod_security
- .htaccess file, blocking or rewriting/redirecting those requests?
- using web inspector to see where the request is going to and whether the CMSMS session cookies are sent with them