Plugin Crashed my Site

[mannyotr]

I installed the WP w3all phpBB plugin on my WP installation. But when I tried configuring it crashed my website.

I entered the correct path to my phpbb config.php file as required. And I entered the correct URL to the phpBB forum.

When I saved the configurations I was logged out of the website. When I tried logging in again my website crashed and this is the error generated (I removed any mention of the actual password or hash):

Code: Select all

[28-Mar-2017 18:44:12 UTC] PHP Warning:  hash_equals(): Expected known_string to be a string, null given in /home1/winderm1/public_html/flxclone/wp-content/plugins/wp-w3all-phpbb-integration/wp_w3all.php on line 464
[28-Mar-2017 18:44:12 UTC] PHP Fatal error:  Uncaught exception 'Exception' with message 'Unsupported hash format.' in /home1/winderm1/public_html/flxclone/wp-content/plugins/wp-w3all-phpbb-integration/addons/bcrypt/bcrypt.php:111
Stack trace:
#0 /home1/winderm1/public_html/flxclone/wp-content/plugins/wp-w3all-phpbb-integration/addons/bcrypt/bcrypt.php(59): w3_Bcrypt::_validateIdentifier(NULL)
#1 /home1/winderm1/public_html/flxclone/wp-content/plugins/wp-w3all-phpbb-integration/wp_w3all.php(485): w3_Bcrypt::checkPassword(<password was here>, NULL)
#2 /home1/winderm1/public_html/flxclone/wp-includes/user.php(154): wp_check_password(<password was here>, <hash was here?>, 4)
#3 [internal function]: wp_authenticate_username_password(NULL, <username was here>, <password was here>)
#4 /home1/winderm1/public_html/flxclone/wp-includes/plugin.php(213): call_user_func_array('wp_authenticate...', Array)
#5 /home1/winderm1/public_html/flxclone/wp-includes/pluggable.php(567): apply_filters('authenticate', NULL, <username was here>, <password was here>)
#6 /home1/winderm1/public_html/flxclone/w in /home1/winderm1/public_html/flxclone/wp-content/plugins/wp-w3all-phpbb-integration/addons/bcrypt/bcrypt.php on line 111

The only way to log in again was to delete the WP w3all phpBB folder from the WP plugin directory.

Any ideas?

[axew3]

is phpBB version 3.1 or better?
at line 464 of wp_w3all.php
where

Code: Select all

$check = hash_equals( $hash, md5( $password ) );

the second parameter (the pass you insert to login on login form) arrive/is passed at this point as NULL. Strange. Maybe some plugin you use interact with login, and onlogin the password you enter, is nullified at some point (as here the result is a null value passed to be compared with hash)? Which plugins you use that can interact with login (if there is)?

[mannyotr]

I use the WP-Members plugin...

https://wordpress.org/plugins/wp-members/

[axew3]

let you know as soon after a test ...