Welcome to Geeklog, Anonymous Sunday, October 13 2024 @ 04:35 am EDT

Geeklog Forums

Geeklog/Gallery login issue


Status: offline

robinbowes

Forum User
Junior
Registered: 08/06/02
Posts: 23
Hi, I have restricted access to my gallery to logged in users. I've noticed that if I log into my geeklog site then log out I am still authorised to access my gallery. Is this a known issue? Any fix for it? R.
 Quote

Status: offline

vinny

Site Admin
Admin
Registered: 06/24/02
Posts: 352
Location:Colorado, USA
Gallery session cookies persist even after geeklog session cookies are destroyed (by logging out). This means that when accessing gallery after logging out of geeklog you will still have the same access to gallery as you had when you were logged in. I think (and I'm not sure about this) that closing your browser window will destroy these cookies. In any case it is a small security problem that really should be fixed. Hope this helps, Vinny
 Quote

Anonymous

Anonymous
Closing your browser does indeed seem to clear the cookies. And yes it should be fixed ! :woot:
 Quote

Anonymous

Anonymous
Doesn't <i>really</i> matter if you are the only one using your computer at home or at work. The glitch only appears on your computer and not to other users logging into and out of the site. The reason this happens is that Gallery sets its own cookies. When you log off of Geeklog, Gallery doesn't know it, so it keeps you logged in to Gallery. The problem should be fixed but the risk is minimal in most environments.
 Quote

Status: offline

ScottMcW

Forum User
Chatty
Registered: 09/22/02
Posts: 42
Can I ask a simpleton question? How did you restrict gallery to logged in users only? Thanks!
 Quote

Status: offline

vinny

Site Admin
Admin
Registered: 06/24/02
Posts: 352
Location:Colorado, USA
Get the latest integration release from http://gplugs.sf.net
 Quote

Anonymous

Anonymous
I have the newest GL and Gallery, and still have this "Only Logs out of GeekLog, and not Gallery" problem... It's a little anoying when I have making changes as myself, then wanting to logout and see how anonymous would see the site. I am have to use 2 different browers for this kinda thing. I'm hoping for a fix... M@
 Quote

Status: offline

vinny

Site Admin
Admin
Registered: 06/24/02
Posts: 352
Location:Colorado, USA
There really is no fix for this. There are a couple of work-arounds: If you have two broswers, I'd suggest being logged in as Admin from one and anonymous from another. If this won't work for you, you can just delete all cookies from your domain after you logout. -Vinny
 Quote

Status: offline

mpursley

Forum User
Junior
Registered: 03/27/03
Posts: 18
[code] Has anyone from this thread tried this "fix"??? http://www.geeklog.net/article.php?story=2002080419482031 Thanks, M@
 Quote

Anonymous

Anonymous
You don't need to create a new $_CONF variable if there is a clash in cookie names between GL and another integrated package. All you have to do is change the cookie name in: $_CONF['cookie_password'] = 'password'; to something like this: $_CONF['cookie_password'] = 'gl_password'; or whatever other cookie has a conflict.
 Quote

Status: offline

mpursley

Forum User
Junior
Registered: 03/27/03
Posts: 18
I just changed my $_CONF['cookie_password'] from "password" to "gl_password" and it still won't logout of the gallery when I logout... I think my next step is to try this... http://www.geeklog.net/article.php?story=2002080419482031 Has anyone tried these changes? M@
 Quote

Status: offline

rawdata

Forum User
Full Member
Registered: 02/17/03
Posts: 236
You can try it, but I'll tell you right now it won't fix the logout problem. That particular article with comments deal with cookie name collisions. In other words, the cookies from two different software applications have the exact same name. As someone pointed out to you already here, you don't need to create a new cookie to get around this. All you have to do is rename the coookie in one or the other so that they have different names. This helps to fix login not logout. I don't have Gallery installed, but apparently it uses its own set of cookies. To fix the logout problem, I think you either need to delete the corresponding Gallery session and/or set the Gallery cookies so that they expire at the time you logout of Geeklog. You can also further integrate the two so they're using the same cookies for logout and login but this might involve quite a bit of work.
 Quote

Status: offline

mpursley

Forum User
Junior
Registered: 03/27/03
Posts: 18
So I did a search on "slideshow" to try to find out why may gallery slideshow sometimes is missing a few pictures from the end (still unsolved by the way) when I came across this little pearl of wisdom... worked for my site (so far)... M@ "I experienced the same problem but I managed to solve it by modifying the init.php under gallery directory as below. if (isset($_USER["username"])) {   $gallery->session->username = $_USER['username']; } else if (!empty($gallery->session->username)) {   $gallery->session->username = ""; } The first two lines are already there which is about line 200, I think. --- sagnaing;" -- http://www.geeklog.net/article.php?story=200210062008532
 Quote

Status: offline

mpursley

Forum User
Junior
Registered: 03/27/03
Posts: 18
So I did a search on "slideshow" to try to find out why may gallery slideshow sometimes is missing a few pictures from the end (still unsolved by the way) when I came across this little pearl of wisdom... worked for my site (so far)... M@ "I experienced the same problem but I managed to solve it by modifying the init.php under gallery directory as below. if (isset($_USER["username"])) {   $gallery->session->username = $_USER['username']; } else if (!empty($gallery->session->username)) {   $gallery->session->username = ""; } The first two lines are already there which is about line 200, I think. --- sagnaing;" -- http://www.geeklog.net/article.php?story=200210062008532
 Quote

All times are EDT. The time is now 04:35 am.

  • Normal Topic
  • Sticky Topic
  • Locked Topic
  • New Post
  • Sticky Topic W/ New Post
  • Locked Topic W/ New Post
  •  View Anonymous Posts
  •  Able to post
  •  Filtered HTML Allowed
  •  Censored Content