must be confirmed before you may enter this high-security area (you do not currently have a confirmed session).

Post

Posted
Rating:
#7145 (In Topic #1761)
I cannot log in to the admin area?

must be confirmed before you may enter this high-security area (you do not currently have a confirmed session).

I cannot log in.

How do fix this?

PHP Version 8.0.17

 

 

Last edit: by na7kr

Post

Posted
Rating:
#7147
Any help please

Post

Posted
Rating:
#7148
Hi there,

I personally have no idea what the issue may be but you can certainly try adding the backdoor_ip line in your _config.php to gain access.

Code

$SITE_INFO['backdoor_ip'] = '12.34.56.78'; // Enable to a real IP address to force login from FTP access (if lost admin password)
 
More info @

Composr Tutorial: Disaster recovery

Open Source CMS with advanced social, interactive and dynamic features. Fully flexible, themeable and extendible: suitable for building powerful websites.

View

Post

Posted
Rating:
#7149
In but lots of errors here are some

Access denied for “main_staff_checklist” (no further details specified).
Access denied for “main_forum_topics” (no further details specified).

Access denied for “main_staff_tips” (no further details specified).

Access denied for “side_rss” (no further details specified).

Post

Posted
Rating:
#7150
Okay that's good to hear, have you followed the rest of that tutorial (clearing caches, checking file integrity, etc)? I've had similar issues in the past, especially with the rss block, but clearing caches certainly helps to eliminate any server stored issues.

Post

Posted
Rating:
#7151
Does not help

Post

Posted
Rating:
#7154
looks like time to move away from compo.sr

Post

Posted
Rating:
#7163
It looks like your IP address keeps shifting around.

This can happen if Cloudflare is incorrectly configured, for example. If you use a reverse proxy solution like Cloudflare it's vital to configure a server to remap the IP address that comes from the user so that it is visible to the web server as the normal IP address (rather than the web server seeing any one of many Cloudflare addresses).

I want to stress this is not a Composr bug or quirk. Without the correct IP address being exposed to the webserver, there is no way for a webapp to properly secure users to their machines, significantly lowering security.

Cloudflare provides an Apache extension, mod_cloudflare, to resolve this. Any competent webhost that integrates Cloudflare for you should provide this or similar automatically.

There is a setting in Composr to workaround this for Cloudflare specifically, but it's unofficial. You need to somehow disable the Cloudflare, go to Commandr, and type this…

Code

:set_value('cloudflare_workaround', '1');

Post

Posted
Rating:
#7174
No cloudflare or any proxy

Post

Posted
Rating:
#7175
Is there some other kind of reverse proxy system? Some web hosts will have their own equivalent, where all traffic is routed through some kind of gateway, then it's served off to the actual machine.

You may want to set up a little PHP script and refresh it a few times to see what the server thinks is your IP address:
Getting IP address of visitors in PHP by $_SERVER['REMOTE_ADDR']
That should confirm if I've correctly diagnosed the IP-changing problem.

It may be somehow your ISP (for example) is rotating your IP a lot. If you are on Tor for example that would happen. If you are on certain proxy server setups, or VPNs, that can happen.

Post

Posted
Rating:
#7177
for the most part, working OK with backdoor IP.
It is not changing without backdoor IP can not log in to the admin area.
 

Access denied for “main_staff_new_version” (no further details specified).

Access denied for “main_forum_topics” (no further details specified).

Access denied for “side_rss” (no further details specified).

Post

Posted
Rating:
#7181
Please do try the script I posted (Getting IP address of visitors in PHP by $_SERVER['REMOTE_ADDR']). It will give some insight into this issue.

The access denied messages are because the Admin Zone start page loads some of the blocks by AJAX. For that to happen the page has to grant access for those backend calls to happen. It grants them to your session.

I just checked the code, and actually IP addresses are not involved in that process. So actually your problem may actually be either you (1) blocking cookies in your browser, or (2) the cookie settings being invalid, or (3) you having some old cookies stuck on different settings overriding the cookies Composr is saving.

1- check your browser settings

2- Check the cookie_domain and cookie_path settings in the _config.php file to make sure they make sense.

3- Try from an incognito/private window.
1 guest and 0 members have recently viewed this.