ign_password_protect

gomedia · 2009-11-21 04:03:24

aslsw66 wrote:

Or size either. And when I tried to add it in the plugin code, it post the size attribute as the class!

Try editing the code as follows. Find the ign_user_field function (it’s down towards the end).

Edit the line:

return fInput('text','p_userid', $value, $class);

& change it to:

return fInput('text','p_userid', $value, $class, $title, $onClick, $size, $tab, $id);

aslsw66 · 2009-11-22 19:09:43

I’ve just started using ign_password_protect on a development site sitting on XAMPP. The functionality works except for the fact that my login is not stored across pages. So, if I move between pages it acts like I’m logged out and I need to login again. This happens even if I use the ‘remember me’ checkbox.

Is this just because I’m running off a localhost for now? It makes it hard to test the comment functionality as every time I try to post I get told that I need to login first.

Last edited by aslsw66 (2009-11-22 20:12:39)

leafy_loader · 2009-11-22 20:13:34

aslsw66 – I’m having the exact same issue. I’m also on localhost and wondered wether that was the issue too. I’m going to have to upload to the live server to test the theory

aslsw66 · 2009-11-22 20:17:58

OK, let us know how it goes.

However, digging into Firefox’s cookies I can’t see a cookie being set at all, so I wonder if the default is rellying on some sort of server-side sessions.

[EDIT]: Looking at a post about rah_comments, it seems that you do need to define a domain to get the cookies for ign_password_protect to work. Now I’m off to figure that out.

Last edited by aslsw66 (2009-11-22 20:26:14)

leafy_loader · 2009-11-22 20:47:29

I uploaded to the live server and it’s doing the exact same thing :(

Let me know if you figure it out, my deadline is looming (gulp)

aslsw66 · 2009-11-22 20:53:07

Well, I can’t comment on your server issues because I am a long way off getting that far.

For local development, I followed the instructions here to set up a virtual host.

I’m working on a Vista laptop, so I had to open Notepad as an administrator to change my windows hosts files, and then go into my Texpattern preferences and update the site url, but it all works now. I think I may have hard coded some references to “localhost”“ somewhere in my navigation (yes, silly thing to do) so I need to track them down.

But that works for my local site. I realised it works when I got the familiar Firefox ‘remember passwords’ bar at the top.

Sorry, I’m not sure about your server issues.

[EDIT] Spoke too soon! Now there is an error message saying “There was a problem logging in”. Looks like some more work to figure this out.

Last edited by aslsw66 (2009-11-22 20:57:46)

leafy_loader · 2009-11-22 21:00:14

OK, glad you got it sorted. I’ll have a look at what you’ve done and see if I can figure it out. cheers

jakob · 2010-02-08 19:28:41

I too am having problems with getting ign_password_protect (v0.5b11c from github) to work with txp 4.2. The login works fine and the cookie is created (I can see it with safari’s cookie manager) but the cookie doesn’t stick and is immediately deleted when one switches to another protected page returning you to the login.

I’m not too familiar with exact workings of the plugin, so forgive me if I’ve got the wrong end of the stick, but I think I have tracked down the cause of the cookie being rejected to the nonce check. The function ign_doTxpValidate compares the $cookie_hash with the nonce value from the respective user table. The cookie_hash is generated anew from a random number every time the cookie is set (in ign_setCookie) but the nonce value in the ign_user table remains the same (at least when I check it in phpmyadmin it doesn’t change) so they can’t match, causing the cookie to be reset and the user to be returned to the login form. Could it be that the nonce needs also updating in the ign_user db-table (you have that for the txp_users but not for ign_users) in ign_setCookie? I tried it out and it seems to resolve the problem, but I hope I haven’t broken the security measure in the process…

One other thing: I tried to work out what difference Also authenticate against txp_users? makes, but the behaviour seems unchanged (also the checkbox doesn’t reflect the setting). Looking at ign_useCustomDbForm it is supposed to set the ign_fallback pref but I can’t see that pref in my txp_prefs table, only ign_user_db and igb_use_custom. I can see that ign_update_prefs tries to update it (though not based on the checkbox setting but on the ign_use_custom radio button) but as the pref is not there, it doesn’t get updated. That said, I don’t see where else ign_fallback is checked at all – in ign_validate there is a fallback check but it checks against ign_use_custom not ign_fallback. Is it perhaps a leftover and no longer needed, or are a few more tweaks necessary in ign_useCustomDbForm, ign_pp_install, ign_update_prefs and ign_validate?

If it helps, I can send you my tinkering so far with your plugin.

progre55 · 2010-02-12 21:24:00

I am not sure if someone has tackled this issue, but hopefully I can be given some guidance. I am currently using ign_password_protect with 4.2 as a part of a memeber login area. It is working fine. The way it is currently set is that their is only one username and password. This was done intentionally because their are a very limited number of members and it was easy very efficient to roll the site out.

I now want to assign individual usernames and passwords. I know that this will not be a problem. My proble lies in the fact that the client would like the memebers to be able to change their passwords and create new passwords? Has anyone tackled this and if so can I be given some hints on how to possible cretae this mechanism.

Thanks in advance.

progre55

igner · 2010-02-13 01:12:03

jakob wrote:

I too am having problems with getting ign_password_protect (v0.5b11c from github) to work with txp 4.2. The login works fine and the cookie is created (I can see it with safari’s cookie manager) but the cookie doesn’t stick and is immediately deleted when one switches to another protected page returning you to the login.

I’m not too familiar with exact workings of the plugin, so forgive me if I’ve got the wrong end of the stick, but I think I have tracked down the cause of the cookie being rejected to the nonce check. The function ign_doTxpValidate compares the $cookie_hash with the nonce value from the respective user table. The cookie_hash is generated anew from a random number every time the cookie is set (in ign_setCookie) but the nonce value in the ign_user table remains the same (at least when I check it in phpmyadmin it doesn’t change) so they can’t match, causing the cookie to be reset and the user to be returned to the login form. Could it be that the nonce needs also updating in the ign_user db-table (you have that for the txp_users but not for ign_users) in ign_setCookie? I tried it out and it seems to resolve the problem, but I hope I haven’t broken the security measure in the process…

One other thing: I tried to work out what difference Also authenticate against txp_users? makes, but the behaviour seems unchanged (also the checkbox doesn’t reflect the setting). Looking at ign_useCustomDbForm it is supposed to set the ign_fallback pref but I can’t see that pref in my txp_prefs table, only ign_user_db and igb_use_custom. I can see that ign_update_prefs tries to update it (though not based on the checkbox setting but on the ign_use_custom radio button) but as the pref is not there, it doesn’t get updated. That said, I don’t see where else ign_fallback is checked at all – in ign_validate there is a fallback check but it checks against ign_use_custom not ign_fallback. Is it perhaps a leftover and no longer needed, or are a few more tweaks necessary in ign_useCustomDbForm, ign_pp_install, ign_update_prefs and ign_validate?

If it helps, I can send you my tinkering so far with your plugin.

jakob, there are some known bugs with this in 4.2. To be honest, my schedule of late has been such that I’ve not had any free time to revisit this – in fact, I’ve not even had time to look at the 4.2 release. But I’m gearing up for my first TXP project in a while, so I’ll be diving back into the core, so I can probably carve out some time to look at the issues mentioned here.

As for the authenticate – yeah, that’s a legacy checkbox that I keep forgetting to strip out…mainly because the UI code is such a mess I hate to touch it.

@progre55 – there’s a basic password reset function in the plugin, you just have to find a place to put it in your site structure.

laptophobo · 2010-05-05 08:35:49

Nice plug-in Igner!

Maybe you can help me with something. I’d like to have the login be performed on one side of the Page, but the Article content to display on another side of my page. Your example tag keeps them together:

<txp:ign_password_protect privs=“1,2,3,4,7” login_msg=“Please log in to view this resource.” remember=“true”><txp:article form=“static_text” /></txp:ign_password_protect>

Yes, I’m new to Textpattern and have not figured out the obvious things. Could you show me?

Thanks again for your good work and detail.

R.

Last edited by laptophobo (2010-05-17 10:41:07)

laptophobo · 2010-05-31 17:05:45

Greetings,
I’m coming back to this (always so helpful and generous) forum once again—this after reading through most of the 74 pages of threads about this plug-in. What I have now as a tag views, but access is not always granted. But I digress.

I have the most recent version of the plug-in installed. All I wish to do is to:
1. protect a Section (so that Articles that land on this section will also enjoy protection) and,
2. Have users and password separate from the Admin Users (just because I’m allowing someone to view the password protected page does not mean I want them to have access to the Textpattern Admin panel or anything else.)

Right now I’m using this tag:
<txp:ign_password_protect privs=“1,2,3,4,7” login_msg=“Please log in to view this resource.” remember=“true”><txp:article form=“static_text” /><a href=”?logout=1”>Logout</a></txp:ign_password_protect>

I really need to get this password issue resolved and have tried many different avenues. (Picture me begging.) I like what Ing’s plug-in does, which is to keep the person within the same page once they have logged-in correctly. So, I’d like to stick with this plug-in if possible.

Thanks for your help out there. I love you guys!

Last edited by laptophobo (2010-05-31 17:14:56)

Textpattern CMS

Textpattern CMS support forum

#721 2009-11-21 04:03:24

Re: ign_password_protect

#722 2009-11-22 19:09:43

Re: ign_password_protect

#723 2009-11-22 20:13:34

Re: ign_password_protect

#724 2009-11-22 20:17:58

Re: ign_password_protect

#725 2009-11-22 20:47:29

Re: ign_password_protect

#726 2009-11-22 20:53:07

Re: ign_password_protect

#727 2009-11-22 21:00:14

Re: ign_password_protect

#728 2010-02-08 19:28:41

Re: ign_password_protect

#729 2010-02-12 21:24:00

Re: ign_password_protect

#730 2010-02-13 01:12:03

Re: ign_password_protect

#731 2010-05-05 08:35:49

Re: ign_password_protect

#732 2010-05-31 17:05:45

Re: ign_password_protect

Board footer