must be confirmed before you may enter this high-security area (you do not currently have a confirmed session).


must be confirmed before you may enter this high-security area (you do not currently have a confirmed session).
I cannot log in.
How do fix this?
PHP Version 8.0.17
Last edit: by na7kr




I personally have no idea what the issue may be but you can certainly try adding the backdoor_ip line in your _config.php to gain access.
Code
$SITE_INFO['backdoor_ip'] = '12.34.56.78'; // Enable to a real IP address to force login from FTP access (if lost admin password)
More info @ Composr Tutorial: Disaster recovery - Composr


Access denied for “main_staff_checklist” (no further details specified).
Access denied for “main_forum_topics” (no further details specified).
Access denied for “main_staff_tips” (no further details specified).
Access denied for “side_rss” (no further details specified).








This can happen if Cloudflare is incorrectly configured, for example. If you use a reverse proxy solution like Cloudflare it's vital to configure a server to remap the IP address that comes from the user so that it is visible to the web server as the normal IP address (rather than the web server seeing any one of many Cloudflare addresses).
I want to stress this is not a Composr bug or quirk. Without the correct IP address being exposed to the webserver, there is no way for a webapp to properly secure users to their machines, significantly lowering security.
Cloudflare provides an Apache extension, mod_cloudflare, to resolve this. Any competent webhost that integrates Cloudflare for you should provide this or similar automatically.
There is a setting in Composr to workaround this for Cloudflare specifically, but it's unofficial. You need to somehow disable the Cloudflare, go to Commandr, and type this…
Code
:set_value('cloudflare_workaround', '1');
Become a fan of Composr on Facebook or add me as a friend. Add me on on Mastodon. Follow me on Minds (where I am most active). Support me on Patreon
- If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
- If so, please let others know about Composr whenever you see the opportunity or support me on Patreon.
- If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying Composr on fun personal projects.
- If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.




You may want to set up a little PHP script and refresh it a few times to see what the server thinks is your IP address:
Getting IP address of visitors in PHP by $_SERVER['REMOTE_ADDR']
That should confirm if I've correctly diagnosed the IP-changing problem.
It may be somehow your ISP (for example) is rotating your IP a lot. If you are on Tor for example that would happen. If you are on certain proxy server setups, or VPNs, that can happen.
Become a fan of Composr on Facebook or add me as a friend. Add me on on Mastodon. Follow me on Minds (where I am most active). Support me on Patreon
- If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
- If so, please let others know about Composr whenever you see the opportunity or support me on Patreon.
- If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying Composr on fun personal projects.
- If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.


It is not changing without backdoor IP can not log in to the admin area.
Access denied for “main_staff_new_version” (no further details specified).
Access denied for “main_forum_topics” (no further details specified).


The access denied messages are because the Admin Zone start page loads some of the blocks by AJAX. For that to happen the page has to grant access for those backend calls to happen. It grants them to your session.
I just checked the code, and actually IP addresses are not involved in that process. So actually your problem may actually be either you (1) blocking cookies in your browser, or (2) the cookie settings being invalid, or (3) you having some old cookies stuck on different settings overriding the cookies Composr is saving.
1- check your browser settings
2- Check the cookie_domain and cookie_path settings in the _config.php file to make sure they make sense.
3- Try from an incognito/private window.
Become a fan of Composr on Facebook or add me as a friend. Add me on on Mastodon. Follow me on Minds (where I am most active). Support me on Patreon
- If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
- If so, please let others know about Composr whenever you see the opportunity or support me on Patreon.
- If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying Composr on fun personal projects.
- If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.