must be confirmed before you may enter this high-security area (you do not currently have a confirmed session).

Post

Posted
Rating:
#8501 (In Topic #2820)
Avatar
Standard member
na7kr is in the usergroup ‘Well-settled’
I cannot log in to the admin area?

must be confirmed before you may enter this high-security area (you do not currently have a confirmed session).

I cannot log in.

How do fix this?

PHP Version 8.0.17

 

 

Last edit: by na7kr

Online now: No Back to the top

Post

Posted
Rating:
#8508
Avatar
Standard member
na7kr is in the usergroup ‘Well-settled’
Any help please
Online now: No Back to the top

Post

Posted
Rating:
#8509
Avatar
Site staff
Adam Edington is in the usergroup ‘Super-moderators’
Hi there,

I personally have no idea what the issue may be but you can certainly try adding the backdoor_ip line in your _config.php to gain access.

Code

$SITE_INFO['backdoor_ip'] = '12.34.56.78'; // Enable to a real IP address to force login from FTP access (if lost admin password)
 
More info @ Composr Tutorial: Disaster recovery - Composr
Online now: No Back to the top

Post

Posted
Rating:
#8510
Avatar
Standard member
na7kr is in the usergroup ‘Well-settled’
In but lots of errors here are some

Access denied for “main_staff_checklist” (no further details specified).
Access denied for “main_forum_topics” (no further details specified).

Access denied for “main_staff_tips” (no further details specified).

Access denied for “side_rss” (no further details specified).
Online now: No Back to the top

Post

Posted
Rating:
#8511
Avatar
Site staff
Adam Edington is in the usergroup ‘Super-moderators’
Okay that's good to hear, have you followed the rest of that tutorial (clearing caches, checking file integrity, etc)? I've had similar issues in the past, especially with the rss block, but clearing caches certainly helps to eliminate any server stored issues.
Online now: No Back to the top

Post

Posted
Rating:
#8512
Avatar
Standard member
na7kr is in the usergroup ‘Well-settled’
Does not help
Online now: No Back to the top

Post

Posted
Rating:
#8517
Avatar
Standard member
na7kr is in the usergroup ‘Well-settled’
looks like time to move away from compo.sr
Online now: No Back to the top

Post

Posted
Rating:
#8529
Avatar
Site director
Chris Graham is in the usergroup ‘Administrators’
It looks like your IP address keeps shifting around.

This can happen if Cloudflare is incorrectly configured, for example. If you use a reverse proxy solution like Cloudflare it's vital to configure a server to remap the IP address that comes from the user so that it is visible to the web server as the normal IP address (rather than the web server seeing any one of many Cloudflare addresses).

I want to stress this is not a Composr bug or quirk. Without the correct IP address being exposed to the webserver, there is no way for a webapp to properly secure users to their machines, significantly lowering security.

Cloudflare provides an Apache extension, mod_cloudflare, to resolve this. Any competent webhost that integrates Cloudflare for you should provide this or similar automatically.

There is a setting in Composr to workaround this for Cloudflare specifically, but it's unofficial. You need to somehow disable the Cloudflare, go to Commandr, and type this…

Code

:set_value('cloudflare_workaround', '1');


Become a fan of Composr on Facebook or add me as a friend. Add me on on Mastodon. Follow me on Minds (where I am most active). Support me on Patreon

Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about Composr whenever you see the opportunity or support me on Patreon.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying Composr on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Online now: No Back to the top

Post

Posted
Rating:
#8541
Avatar
Standard member
na7kr is in the usergroup ‘Well-settled’
No cloudflare or any proxy
Online now: No Back to the top

Post

Posted
Rating:
#8542
Avatar
Site director
Chris Graham is in the usergroup ‘Administrators’
Is there some other kind of reverse proxy system? Some web hosts will have their own equivalent, where all traffic is routed through some kind of gateway, then it's served off to the actual machine.

You may want to set up a little PHP script and refresh it a few times to see what the server thinks is your IP address:
Getting IP address of visitors in PHP by $_SERVER['REMOTE_ADDR']
That should confirm if I've correctly diagnosed the IP-changing problem.

It may be somehow your ISP (for example) is rotating your IP a lot. If you are on Tor for example that would happen. If you are on certain proxy server setups, or VPNs, that can happen.


Become a fan of Composr on Facebook or add me as a friend. Add me on on Mastodon. Follow me on Minds (where I am most active). Support me on Patreon

Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about Composr whenever you see the opportunity or support me on Patreon.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying Composr on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Online now: No Back to the top

Post

Posted
Rating:
#8544
Avatar
Standard member
na7kr is in the usergroup ‘Well-settled’
for the most part, working OK with backdoor IP.
It is not changing without backdoor IP can not log in to the admin area.
 

Access denied for “main_staff_new_version” (no further details specified).

Access denied for “main_forum_topics” (no further details specified).

Access denied for “side_rss” (no further details specified).
Online now: No Back to the top

Post

Posted
Rating:
#8548
Avatar
Site director
Chris Graham is in the usergroup ‘Administrators’
Please do try the script I posted (Getting IP address of visitors in PHP by $_SERVER['REMOTE_ADDR']). It will give some insight into this issue.

The access denied messages are because the Admin Zone start page loads some of the blocks by AJAX. For that to happen the page has to grant access for those backend calls to happen. It grants them to your session.

I just checked the code, and actually IP addresses are not involved in that process. So actually your problem may actually be either you (1) blocking cookies in your browser, or (2) the cookie settings being invalid, or (3) you having some old cookies stuck on different settings overriding the cookies Composr is saving.

1- check your browser settings

2- Check the cookie_domain and cookie_path settings in the _config.php file to make sure they make sense.

3- Try from an incognito/private window.


Become a fan of Composr on Facebook or add me as a friend. Add me on on Mastodon. Follow me on Minds (where I am most active). Support me on Patreon

Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about Composr whenever you see the opportunity or support me on Patreon.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying Composr on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Online now: No Back to the top
1 guest and 0 members have just viewed this.

Statistics

Forum statistics:
  • 2,051 topics, 7,194 posts, 10,824 members
  • Our newest member is gracenayjanjoh
Birthdays:
Back to Top