ud1 associated, deleted in WP

Post a reply


This question is a means of preventing automated form submissions by spambots.
Smilies
:D :) ;) :( :o :shock: :? 8-) :lol: :x :P :oops: :cry: :evil: :twisted: :roll: :!: :?: :idea: :arrow: :| :mrgreen: :geek: :ugeek:

BBCode is ON
[img] is ON
[url] is ON
Smilies are ON

Topic review
   

If you wish to attach one or more files enter the details below.

Maximum filesize per attachment: 1 MiB.

Expand view Topic review: ud1 associated, deleted in WP

Re: ud1 associated, deleted in WP

by axew3 » Fri Aug 17, 2018 10:07 pm

about security, it should be now quite sure there are no problems. The plugin is going on ok under this aspect since his 1st release.
about the one i've not answered before: no the plugin do not leave, nor add nothing into phpBB or Wp (except the 3 records on wp db option table, that you know now very well).
what for you could seem a security bug look more like that there is some user that is recognized wrongly due to duplicated email or, cookie that is not correctly setup mixed with something else.
I will try to re-check step by step all the code on coming soon 1.9.1 and hope maybe this will be more friendly on resolve any possible aspect.

Re: ud1 associated, deleted in WP

by Optix » Fri Aug 17, 2018 9:44 pm

Yeah it's OK, I realised after the fact I could have just done that edit to "turn off" the plugin. Ah well.

At some point in the future I may revisit this. At this point, I don't feel up to it.

I can't wrap my head around why the plugin would immediately dump me out of Wordpress; that implies a cookie issue but I've triple-quadruple checked my cookie settings and cleared them multiple times, all with the same result.

It worked when I first installed it, except Wordpress would then log me in as UID1 - except I was logging in as UID2. Not only does that boggle my mind, it makes me think it's a possible security issue.

Thanks for your help.

Re: ud1 associated, deleted in WP

by axew3 » Fri Aug 17, 2018 9:27 pm

you do not need to uninstall manually the plugin
open file wp_w3all.php
search line:

Code: Select all

// $w3deactivate_wp_w3all_plugin = 'true';
change into:

Code: Select all

$w3deactivate_wp_w3all_plugin = 'true';
Or use any other way as on above linked No panic instruction post is explained, to achieve the same result (plugin not active).
But ok you can do also in the "more advanced way".
I'm sorry that you have not find out the way to install and you've give up.
Would like to help understand where the problem is, but i've give on previous posts any possible "on mind at moment" solutions.
if you want find out the time to setup a test somewhere (may a subfolder) i will be glad to help you and try to resolve the mess.
In case pm me and be patient because until 1st of September i stole time when possible, to be free.
Cheers

Re: ud1 associated, deleted in WP

by Optix » Thu Aug 16, 2018 1:39 pm

Well, I give up. I screwed up the install *somehow* and now as soon as I put in the settings for phpBB in Wordpress, I get booted from WP and can't log back in.

I triple checked my cookie settings in phpBB. I logged out, cleared the cookies. I tried the custom config.php option. Same result.

So, I give up. My users can create logins for both. Thanks for your help, I'm sure your plugin is great, I just can't get it to work now.

Re: ud1 associated, deleted in WP

by Optix » Thu Aug 16, 2018 1:16 pm

OK, I found some settings that w3 had put in the database and removed them. (I have some experience with mySQL). This allowed me to actually Deactivate and Delete the plugin properly through Wordpress. With that done, I tried installing the plugin again. I activated and went to the settings screen. I put in the phpBB settings as required and then as soon as I clicked SAVE I was dumped out of Wordpress ("You do not have access") and could not log back in. :evil:

Back to manually delete the plugin via FTP and remove the settings from the database again.

Re: ud1 associated, deleted in WP

by Optix » Thu Aug 16, 2018 1:00 pm

As soon as I reinstall the plugin and Activate it, I lose access to the Wordpress admin. I also start getting blank pages when trying to access the phpBB admin. When I try to logout of phpBB, I get a message saying I wasn't logged out as my login didn't match my session. I click Logout again and it works.

I then have to FTP to my server and delete the plugin manually to get access back to Wordpress. Wordpress recognises that the plugin had previously existed (I get a message saying "plugin was disabled as it doesn't exist").

While I can see there may be a problem with cookies there (I followed the instructions closely) it feels like there is some settings left somewhere. Are they in the database? If I could delete those settings, I may be able to reinstall the plugin from scratch and get it working properly.

Top