Invisible user activation page

New Member Joined: Jun 29, 2005 Posts: 15

Hi everyone, it feels weird to post again, I haven't been maintaining a NUKE site for a while.

Anyway, I'm working with a 7.6 version, patched with chatserv 2.9 right now and Sentinel 2.2. When a new user follows the email link required to register, they only see my default module and don't the page to complete their registration.

The only way for them to register is if I set your_account as a default module.

While the main page is displayed, the URL is accurate (it is the URL that points to the new use activation, it just displays my main page).

Any idea? Not sure it related to Sentinel but I started to have this problem after all the security/sentinel install so I might have touched something that I shouldn't have in a main file. THANK!

registered · Site Admin Joined: Jun 04, 2004 Posts: 6437

Did you install the patch, or did it come with the download? It sounds like a security issue on the Your_Account module index.php file.

Posted: Thu Feb 01, 2007 1:16 am

This is actually an "old" install. I started with Nuke 7.6, created an admin, a few token users as a test and everything worked. I then moved to chatserv and then Sentinel. I recently had a chance to finish the site and finally went live with it... Only to discover that people coudn't validate their registration.

As I said, it's probably something I did. I was hoping that from the symptoms, it would be a pretty standard mistake and that someone could point me in the right direction Sad

registered · Posted: Thu Feb 01, 2007 4:06 pm

Check the Site URL in your Preferences

Posted: Thu Feb 01, 2007 5:18 pm

The URL is actually right. I don't get an error message. The site just doesn't open the confirmation page and instead shows the frontpage module.

Posted: Thu Feb 01, 2007 10:39 pm

Okay, post the link for us to see

Posted: Thu Feb 01, 2007 11:13 pm

The site is located at EDITED OUT.

Posted: Fri Feb 02, 2007 10:52 am

I don't get it, this site returns a different one than your link

I'm completely confused about what site is what

Posted: Fri Feb 02, 2007 2:46 pm

The site it redirected to the second address... You shouldn't see the actual URL tho, I'll have to check with my provider. The redirection works well with other sites nuke sites tho...

Thanks a lot for your help, I think it's going to be too much of a headache. I've just started to install the latest Raven distribution and switch.

Can you do me a favor a edit your post to remove the links? Not sure it makes any difference, I just don't like to have them exposed for people trying to gather nuke running addresses to try their exploits.

Thanks again!

Posted: Fri Feb 02, 2007 3:18 pm

Ahhh... a fresh RavenNuke! Definitely a good plan.

Posted: Sat Feb 03, 2007 12:37 am

Removed by request.

I still think its a redirection problem. Just look at the last URL
/?name=Your_Account&op=activate&username...
It ends the directory path with no reference to any file

Please note that with any redirected or cloaked URLs, users may have problems logging in. Cookies (esp in IE) may not function correctly

Posted: Sat Feb 03, 2007 12:42 am

I'm trying to work on the redirection right now. It used to be totally transparent, I don't know why it now shows the actual URL of the host.

At least I have the latest RavenNuke installed and running the site with the main modules in place. I'll just slowly polish things but at least there is something in place Smile

Thanks!