[phpesp-dev] [ phpesp-Bugs-1449653 ] log in issues

[SourceForge.net <no...@so...>]

Bugs item #1449653, was opened at 2006-03-14 07:20
Message generated for change (Comment added) made by nobody
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108956&aid=1449653&group_id=8956

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: Admin
Group: v1.8
Status: Open
Resolution: None
Priority: 5
Submitted By: Nobody/Anonymous (nobody)
Assigned to: Nobody/Anonymous (nobody)
Summary: log in issues

Initial Comment:
I got the data base installed and the phpesp folder 
in the root of my web server. I am using the latest 
version of xampp. I tried to log in as root on the 
management page but it gives me this error not matter 
what I try.

" Incorrect User ID or Password, or your account has 
been disabled/expired."

I have even tried droping the user root out of the 
table and inserting root back in with useing the same 
sytax and values from the mysql_populate.sql script, 
and still get the same thing.

I would spend hours looking through the code but I 
thought you might have a fix for this issue already.

Michael LeJeune

mjl...@gm...

----------------------------------------------------------------------

Comment By: Nobody/Anonymous (nobody)
Date: 2006-03-19 09:34

Message:
Logged In: NO 

I had the same problem on MySQL 5 - her is the solution:


changes in
phpESP-1.8\phpESP\admin\include\lib\espauth-default.inc

old:

        // Formulate the query check whether user is authorized
        $sql = "SELECT * FROM
".$GLOBALS['ESPCONFIG']['designer_table']." WHERE
        username = "._addslashes($username)." AND
        password = ".db_crypt($password)." AND
        disabled = 'N' AND
        (expiration = '0' OR expiration > ".
sys_time_stamp().")";
        
new:

        // Formulate the query check whether user is authorized
        $sql = "SELECT * FROM
".$GLOBALS['ESPCONFIG']['designer_table']." WHERE
        username = "._addslashes($username)." AND
        password = ".db_crypt($password)." AND
        disabled = 'N' AND
        (expiration = '0000-00-00 00:00:00' OR expiration >
". sys_time_stamp().")";


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=108956&aid=1449653&group_id=8956