User Login Now Requires Password - Why?

Posted: Sun Jul 25, 2004 7:47 pm

Since I installed V2.0, all users are getting a login box when hitting my site. Is this normal, and how can I turn it off?

registered · Posted: Sun Jul 25, 2004 9:30 pm

10 to 1 odds, you have a login box for your admin as well and since the gfx call admin.php for it's image it is triggering the HTTPAuth system. Had the same issue on my site until I had my admin login box call the image from the Your Account module instead.

Look for this code (or similar) in any of yoru blocks that lead to admin:

Code:

<img src='admin.php?op=gfx&random_num=$random_num' border='1' alt='"._SECURITYCODE."' title='"._SECURITYCODE."'>

and replace it with:

Code:

<img src='modules.php?name=Your_Account&op=gfx&random_num=$random_num' border='1' alt='"._SECURITYCODE."' title='"._SECURITYCODE."'>

Posted: Mon Jul 26, 2004 5:23 am

Would this affect all users? I do have an addon block that contains the code. I'll try that tonight. Thanks Bob!

Posted: Mon Jul 26, 2004 9:01 am

Anyone hitting your site would see the HTTPAuth box appear due to the call to the admin gfx code. It happened on my site and I got a blue billion emails asking what was going on Smile

Client Joined: Jul 18, 2003 Posts: 977

So how do we make sure it is not happening on our sites? Thanks!

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

Log off as a user and try to log on Smile

Posted: Mon Jul 26, 2004 9:35 pm

Refer the post above I made about switching from pulling the security image from admip.php to pulling it from the Your Account module instead. the two are the same just a different location.

Posted: Tue Jul 27, 2004 7:20 am

Raven wrote:

Log off as a user and try to log on Smile

D'oh!!

Posted: Sat Oct 16, 2004 9:06 am

I'm getting it again when I installed the new sentinel with a fresh install. Both of my GFX are pointing to your account module, but when I go to the Sentinel config and turn on the http auth, the box pops again... can't figure it out. Upgraded to 7.5 BTW. Doh!

Posted: Sat Oct 16, 2004 10:20 am

Do you have anything new in a block that might be pulling from admin.php? I run 7.5 and have no such issue.

Posted: Mon Oct 18, 2004 1:43 pm

I don't believe that I have anything else. All admins have http auth in the Sentinel control panel. When I activate the http auth feature, the authorization pops up even though I'm in the control panel. Is there a wat to see what modules are calling admin.php?