Zenphoto
The simpler media website CMS
ZenphotoThe simpler media website CMS
Forum search only. You might also want to search on the main site's user guide.
Your support helps pay for this server, and helps development of zenphoto. Thank you!
Visit the donations page
Comments
If that is so, you are using simplescripts or the like, you will have to take this up with them.
If not, how about identifying the version of Zenphoto you are installing.
This takes me through the setup process (I've already created the MySQL database and user) of which the final step is create an administrator log in and password. In my test, I then create a couple of albums, set some options and upload a few photos, just to understand how everything works and what visual effect the options have. What I have found is that once I log out as administrator, I can't get back in. I've been very careful to keep a record of the user and password but it does not let me in. When I try and reset by entering the captcha, I get en error that it can't send an email, probably because I'm doing this testing in a localhost environment.
Any help as to what I'm doing wrong or missing would be helpful.
I still don't understand how to get back in as administrator.
I set up the database, build some albums, set all my options. All works well. Once I close the browser down and come back into the site, I have no login box available to me to log in as admin. What option do I set to get this.
If I run the .../zenphoto/zp-core/admin.php directly in the browser, my login and password do not work. Nor will sendmail work if I try and use cpatcha. This is all running on my local PC that has apache & MySQL running on it plus enabled for php. I have other test websites on this PC that work fine with MySQL and php. This one works fine until I log out, than I can't get back in unless I completely re-build zenphoto.
So, we need your help to find out what is going wrong here. My collegue who is the expert on this is unavaiable until next week. So I suggest you create a ticket on our bugtracker so this thread does not get lost and described detailed what you did. Also please post some details about your server (phpinfo() would maybe be helpful).
You don't need to rebuild Zenphoto totally to get back in. The fix- as mentioned several times on the forum and also on our troubleshooting user guide entry- is to delete the administrators table in the db and then rerun setup.
Consider this thread closed, I re-post with better details if it happen again.
You guys are great coders - why not make a script to handle these real-world abnormalities? There must be some way ... and I am happy to help.
We still can't reproduce this issue which makes it hard to find out why that happens for some (as reported on other threads). We of course would love if this would not occur.
Besides, I have a strong suspicion that all these instances are caused by having used a third party install sometime in the past. Those that provide you with a user/password can easily set up things so that the login will work until the cookie expires. Once that happens you cannot log in again as the install program has botched the hashed credentials.
Anyway, our offer still stands. If someone who experiences this problem wishes to have it resolved then set the DEBUG_LOGIN define to true and go through the process. Maybe you will have someting different, but so far, what we have seen is always that the hashing of the supplied user/password of the login does not match the hashing of stored in the database. There is absolutely no way to tell why this would be. That is the beauty of hashed credentials, they are pretty much one way encryptions unless you really want to apply some brute force computing power to them.
Since the user name is clear text, what we can tell is that either the password tendered is not the same as when the user was created or that the hashing algorithm is not the same. The latter is usually what happens with the third party installers.
The previous setup I did I had a sql error message for admin during setup and deleting the admin table worked. My un and password are the same and simple: Admin. If you want to take a look at it please send me an email. cbfga@bellsouth.net
I upgraded to 1.3 today (I was running 1.2.6 before). As soon as setup was done, I tried to log in. I still could not.
I found this thread, and following the advice above, I deleted my zp_administrators table and reran setup. I still couldn't access the admin pages -- not even to log in.
I've tried deleting the zp_administrators table and rerunning setup several more times... with the same result each time.
I am really disappointed. I spent a lot of time getting Zenphoto looking the way I wanted, and uploading pictures. (My gallery is at http://bookofsand.net/photos, and uses a customized version of the Flickrish theme.)
Now it appears that the program is suddenly, inexplicably unusable to me. If that's the case, I've wasted a huge amount of time and effort on it.
Any help appreciated. I'm not ready to give up on Zenphoto quite yet!
P.S. I've looked at http://www.zenphoto.org/2009/03/troubleshooting-zenphoto/#47. I can't follow these suggestions, because when I run setup, I am not prompted to create a new username and password. I am simply told I can view my gallery or administer. I can view the gallery without a problem, but I can't get to the admin pages.
I was expecting that none of these links would work, since I can't access admin.php. The Admin link, which went to that page, didsn't work -- it timed out. But to my surprise, most of the other links did work! For example, by clicking on Options, I could access the "users" tab of my admin pages.
Once I was in the admin pages, I could access almost anything by clicking on the tabs -- "upload", "albums", "tags", "comments", "users", "themes", "plugins", "logs". The only tab which didn't work was "overview", which attempted again (unsuccessfully) to direct me to admin.php.
To my even greater surprise, and alarm, I found that I could access most of the admin pages from any of 4 different browsers, on 2 different computers, without logging in! In other words, most of my admin functions were wide open to anyone browsing my gallery.
This means that anyone could come along and delete or upload content, create new users with admin rights, and do all sorts of other damage. This was obviously totally insecure and unacceptable. I had no choice but to delete my Zenphoto install immediately.
At this point, I am leaning against trying to reinstall the program. Even if I could get it running again, I don't know when I might be suddenly locked out, or find that anyone could access my supposedly secure admin functions.
Good luck getting your program working and secure. It proved to be neither for me.
http://www.zenphoto.org/2009/03/troubleshooting-zenphoto/#47
As this states you have to change the file named within zp-core to get the debug log.
I really doubt that anyone could access your backend. Most likely you still were logged in with your browser as that is stored via cookies (or sessions if you use that setting) on your browser. Clear the browser cookies and best also the browser cache. Or did you try this with anohter browser and computer as well?
Your problem came because you upgraded from a rather old version. That can happen since some user handling changed since 1.2.6 and we have not exactly tested upgrading from those old version. Probably we should have stated that on the upgrade page. I apologize for that.
Anyway, let us know if you want further help.
What he has described just is not possible with Zenphoto. So either the descriptions are poor or they are fabrications. The fact that he has said the same on Twitter without waiting for a response seems to indicate the latter.
For instance, it is somewhat inconsistent to say that he cannot access the admin pages on the one hand and on the other that he can do so from numerous computers while not logged in.
i feel pity for them..
any ways thanks team for this wonderful release