I just installed PHPSecurityAdmin, but there are some problems left:
Is there (or will there be) a possibility to prevent the admin from being locked out?
It is very useful that users are locked out when their password is entered to often the wrong way, but if the admin is locked out it can lead to problems (Nobody can reactivate him through the admin interface).
Some user management systems re-activate an account automatically when password was wrong after some time, perhaps this could be an idea for a new feature.
The Session is stored as a cookie on the local machine. Is there a possibility to use sessions which are stored on the on the webserver instead of these user cookies?
Thanks in advance for your replies, Andy
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
There are no plans for a reactivation of the admin account in the code. However, all you would need to do is go into the database and set the active field in the users table for the admin user to restore access.
PSA is programmed to store session data in a database, not in a cookie. However, the session id may be stored in a cookie on your machine depending on your server configuration. If your session data is being stored in cookies, then something is very wrong in your server setup.
in includes/session.php, there is a call to set the handler to the database:
ini_set('session.save_handler','user')
If this doesn't work, the data should be stored as a file on the webserver (PHP default). Anything other than this indicates a very big problem in your server setup.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Warning: Bad column offset specified in /home/httpd/vhosts/host/httpdocs/admin/brokers/include/metabase/metabase_mysql.php on line 210
User Updated Successfully.
Warning: Bad column offset specified in /home/httpd/vhosts/host/httpdocs/admin/brokers/include/metabase/metabase_mysql.php on line 210
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Hi,
I just installed PHPSecurityAdmin, but there are some problems left:
Is there (or will there be) a possibility to prevent the admin from being locked out?
It is very useful that users are locked out when their password is entered to often the wrong way, but if the admin is locked out it can lead to problems (Nobody can reactivate him through the admin interface).
Some user management systems re-activate an account automatically when password was wrong after some time, perhaps this could be an idea for a new feature.
The Session is stored as a cookie on the local machine. Is there a possibility to use sessions which are stored on the on the webserver instead of these user cookies?
Thanks in advance for your replies, Andy
There are no plans for a reactivation of the admin account in the code. However, all you would need to do is go into the database and set the active field in the users table for the admin user to restore access.
PSA is programmed to store session data in a database, not in a cookie. However, the session id may be stored in a cookie on your machine depending on your server configuration. If your session data is being stored in cookies, then something is very wrong in your server setup.
in includes/session.php, there is a call to set the handler to the database:
ini_set('session.save_handler','user')
If this doesn't work, the data should be stored as a file on the webserver (PHP default). Anything other than this indicates a very big problem in your server setup.
Warning: Bad column offset specified in /home/httpd/vhosts/host/httpdocs/admin/brokers/include/metabase/metabase_mysql.php on line 210
User Updated Successfully.
Warning: Bad column offset specified in /home/httpd/vhosts/host/httpdocs/admin/brokers/include/metabase/metabase_mysql.php on line 210