Re: [Phpgroupware-users] Login loop

[Bob Crandell]

Making that change fixed it.

Of the 4 sites that are using phpGw this only happened to 2.  I'm thinking CVS
doesn't do this to everybody.  Being special isn't all it's cracked up to be.

For me, it's not line 1185 it's 1188.

Thanks everybody.  I can finally enjoy my weekend.

Guillaume Courtois (address@hidden) wrote:
>
> Er ... Am I blind or there is no diff between the 2 lines ?
>
> aeb (address@hidden) écrivait:
> >
> >
> > phpgwapi/inc/class.sessions.inc.php
> >
> > Line 1185
> >
> > $new_extravars .= '&';
> >
> > change it to:
> >
> > $new_extravars .= '&';
> >
> > grtx. ceb
> >
> >
> > On Mon, 30 May 2005, Bob Crandell wrote:
> >
> > > Hi,
> > > This is what I get when it loops around:
> > > 67.171.241.227 - - [29/May/2005:12:37:13 -0700]
> > > "POST /phpgroupware/login.php HTTP/1.1" 302 5
> > > 67.171.241.227 - - [29/May/2005:12:37:13 -0700]
> > > "GET /phpgroupware/home.php?
> > >
> >
> cd=yes&sessionid=0ed64b3f5e580fe07daa13a12663e4a9&kp3=5d872d1e7d453f5058de75c48113b1fc&domain=default&PHPGW_PHPSESSID=&click_history=1472488588b497bc9a640619a3280d2e
> > HTTP/1.1" 302 5
> > > 67.171.241.227 - - [29/May/2005:12:37:13 -0700]
> > > "GET /phpgroupware/login.php HTTP/1.1" 200 2291
> > >
> > > This is what I get when it goes on in:
> > > 67.171.241.227 - - [30/May/2005:06:42:04 -0700]
> > > "GET /phpgroupware/login.php HTTP/1.1" 200 2260
> > > 67.171.241.227 - - [30/May/2005:06:42:22 -0700]
> > > "POST /phpgroupware/login.php HTTP/1.1" 302 5
> > > 67.171.241.227 - - [30/May/2005:06:42:22 -0700]
> > > "GET /phpgroupware/home.php?
> > >
> >
> cd=yes&sessionid=dfe15e88d4f4e174bd934a0f86003af5&kp3=12c131cf1da9a9753f80ca936e6a1485&domain=default&PHPGW_PHPSESSID=&click_history=f359a7936f77db2cde9a397c8050b6a8
> > HTTP/1.1" 302 5
> > > 67.171.241.227 - - [30/May/2005:06:42:23 -0700]
> > > "GET /phpgroupware/admin/index.php?
> > >
> >
> sessionid=dfe15e88d4f4e174bd934a0f86003af5&kp3=12c131cf1da9a9753f80ca936e6a1485&domain=default&PHPGW_PHPSESSID=&click_history=20e977380905fc960ca823da15692313
> > HTTP/1.1" 200 40880
> > >
> > > I hope this helps anyone watching this thread.
> > > Bob C.
> > >
> > > On Mon, 2005-05-30 at 08:52 -0400, Bob Bosiljevac wrote:
> > > > I am not sure if this is related to the problem below or not but I am
> > > > having a login loop issue as well. In my case, I am reasonably certain 
> > > > it
> > > > is related to the '&' in the redirect URLs being rendered as '&' in
> > > > the actual request.
> > > >
> > > > This is what shows up in my log:
> > > >
> > > > GET
> >
> /home.php?cd=yes&sessionid=916118973e0bd96a77517a4c9567a5f8&kp3=cfd9d773440fad211acf946ae83e481a&domain=default&PHPSESSID=916118973e0bd96a77517a4c9567a5f8&click_history=5ef7909662c081e69a160e0aad2f4cd1
> > HTTP/1.1" 302 5
> > > >
> > > > This can't be right.
> > > >
> > > > Can anybody give me a clue as to how I can fix this?
> > > >
> > > > Bob.
> > > >
> > > >
> > > >
> > > > On Tue, 24 May 2005, Bob Crandell wrote:
> > > >
> > > > > From: Bob Crandell <address@hidden>
> > > > > To: phpGroupware Users <address@hidden>
> > > > > Date: Tue, 24 May 2005 18:30:05 +0000
> > > > > Subject: [Phpgroupware-users] Login loop
> > > > > Reply-To: address@hidden
> > > > >
> > > > > Hi,
> > > > >
> > > > > I have a client with phpgroupware version 0.9.16.005 updated this 
> > > > > morning.
> > > > > Apache is v1.3.33.  Mysql is 3.23.56
> > > > >
> > > > > When a user, any user tries to login, they are returned to the login 
> > > > > screen.
> > > > >
> > > > > When an incorrect user name or password is tried the phpGW returns 
> > > > > the proper
> > > > > error.  There are no messags in var/log/apache/error_log related to 
> > > > > this.  The
> > > > > access_log shows web activity thusly:
> > > > > 66.78.90.70 - - [24/May/2005:11:26:29 -0700] "POST 
> > > > > /phpgroupware/login.php
> > > > > HTTP/1.1" 302 5
> > > > > 66.78.90.70 - - [24/May/2005:11:26:29 -0700] "GET
> > > > >
> >
> /phpgroupware/home.php?cd=yes&sessionid=52936c9f2f6fe35beec5760c92f60123&kp3=52d03faec47a22f3c125054d5f9dcf98&domain=default&PHPSESSID=52936c9f2f6fe35beec5760c92f60123&click_history=a7d7580e93f2f944e33d106a271fc10a
> > > > > HTTP/1.1" 302 5
> > > > > 66.78.90.70 - - [24/May/2005:11:26:29 -0700] "GET 
> > > > > /phpgroupware/login.php
> > > > > HTTP/1.1" 200 2291
> > > > >
> > > > > I seem to remember someone having this issue not too long ago but I 
> > > > > couldn't
> > > > > find the thread.  Could some kind soul help me track this down?
> > > > >
> > > > > Please?
> > > > >
> > > > > Thanks
> > > > >
> > > > > --
> > > > > Bob Crandell, CLS, CNS
> > > > > Assured Computing, Inc.
> > > > > When you need to be sure.
> > > > > http://www.assuredcomp.com/
> > > > > 921 Country Club Road, Suite 100
> > > > > Eugene, OR 97402
> > > > > Voice - 541-868-0331
> > > > > FAX - 541-463-1627
> > > > >
> > > > > This message is intended solely for the use of the individual and 
> > > > > entity to
> > > > > whom it is addressed, and may contain information that is privileged,
> > > > > confidential, and exempt from disclosure under applicable state and 
> > > > > federal
> > > > > laws. If you are not the addressee, or are not authorized to receive 
> > > > > for the
> > > > > intended addressee, you are hereby notified that you may not use, 
> > > > > copy,
> > > > > distribute, or disclose to anyone this message or the information 
> > > > > contained
> > > > > herein. If you have received this message in error, immediately 
> > > > > advise the
> > > > > sender by reply email and destroy this message.
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > _______________________________________________
> > > > > Phpgroupware-users mailing list
> > > > > address@hidden
> > > > > http://lists.gnu.org/mailman/listinfo/phpgroupware-users
> > > > >
> > > >
> > > >
> > > > _______________________________________________
> > > > Phpgroupware-users mailing list
> > > > address@hidden
> > > > http://lists.gnu.org/mailman/listinfo/phpgroupware-users
> > > >
> > >
> > >
> > >
> > > _______________________________________________
> > > Phpgroupware-users mailing list
> > > address@hidden
> > > http://lists.gnu.org/mailman/listinfo/phpgroupware-users
> > >
> >
> > best regards.
> > bettina gille
> > cofounder | coordinator | main developer phpGroupWare
> >
> > ---------
> > [contact]
> > --------------------------------------------------------
> > [atelier] [behringstrasse 110 | 22763 hamburg] [germany]
> > [fon] [+49 (0)40 41 09 56 56]
> > [mobile] [+49] (0)163 314 2 192]
> > [url] [www.e-werft.de]
> > ----------------------
> > [at school] [hochschule für bildnde künste hamburg]
> >             [school of fine arts hamburg] [germany]
> >             [telematik]
> > [fon] [+49 (0)40 428 9 89 305]
> > [url] [www.hfbk-hamburg.de]
> > ---------------------------
> > [projects]
> > ----------
> > [phpGroupWare]
> > [www.phpgroupware.org]
> > ----------------------
> > [FUNKWERK]
> > [funkwerk.sourceforge.net]
> > --------------------------
> > [linux-at-work]
> > [sourceforge.net/projects/linux-at-work]
> > ----------------------------------------
> > [x-werk]
> > [www.x-werk.org]
> > ----------------
> >
> >
> > _______________________________________________
> > Phpgroupware-users mailing list
> > address@hidden
> > http://lists.gnu.org/mailman/listinfo/phpgroupware-users
> >
>
>
>
> _______________________________________________
> Phpgroupware-users mailing list
> address@hidden
> http://lists.gnu.org/mailman/listinfo/phpgroupware-users
>
>

--
Bob Crandell, CLS, CNS
Assured Computing, Inc.
When you need to be sure.
http://www.assuredcomp.com/
921 Country Club Road, Suite 100
Eugene, OR 97402
Voice - 541-868-0331
FAX - 541-463-1627

This message is intended solely for the use of the individual and entity to
whom it is addressed, and may contain information that is privileged,
confidential, and exempt from disclosure under applicable state and federal
laws. If you are not the addressee, or are not authorized to receive for the
intended addressee, you are hereby notified that you may not use, copy,
distribute, or disclose to anyone this message or the information contained
herein. If you have received this message in error, immediately advise the
sender by reply email and destroy this message.