Welcome to Geeklog, Anonymous Sunday, October 13 2024 @ 04:35 am EDT
Geeklog Forums
Geeklog/Gallery login issue
Status: offline
robinbowes
Forum User
Junior
Registered: 08/06/02
Posts: 23
Hi,
I have restricted access to my gallery to logged in users.
I've noticed that if I log into my geeklog site then log out I am still authorised to access my gallery.
Is this a known issue? Any fix for it?
R.
4
5
Quote
Status: offline
vinny
Site Admin
Admin
Registered: 06/24/02
Posts: 352
Location:Colorado, USA
Gallery session cookies persist even after geeklog session cookies are destroyed (by logging out). This means that when accessing gallery after logging out of geeklog you will still have the same access to gallery as you had when you were logged in.
I think (and I'm not sure about this) that closing your browser window will destroy these cookies. In any case it is a small security problem that really should be fixed.
Hope this helps,
Vinny
3
3
Quote
Anonymous
Anonymous
Closing your browser does indeed seem to clear the cookies.
And yes it should be fixed ! :woot:
4
4
Quote
Anonymous
Anonymous
Doesn't <i>really</i> matter if you are the only one using your computer at home or at work. The glitch only appears on your computer and not to other users logging into and out of the site. The reason this happens is that Gallery sets its own cookies. When you log off of Geeklog, Gallery doesn't know it, so it keeps you logged in to Gallery.
The problem should be fixed but the risk is minimal in most environments.
4
3
Quote
Anonymous
Anonymous
I have the newest GL and Gallery, and still have this "Only Logs out of GeekLog, and not Gallery" problem...
It's a little anoying when I have making changes as myself, then wanting to logout and see how anonymous would see the site. I am have to use 2 different browers for this kinda thing.
I'm hoping for a fix...
M@
4
3
Quote
Status: offline
vinny
Site Admin
Admin
Registered: 06/24/02
Posts: 352
Location:Colorado, USA
There really is no fix for this.
There are a couple of work-arounds: If you have two broswers, I'd suggest being logged in as Admin from one and anonymous from another. If this won't work for you, you can just delete all cookies from your domain after you logout.
-Vinny
5
4
Quote
Status: offline
mpursley
Forum User
Junior
Registered: 03/27/03
Posts: 18
[code]
Has anyone from this thread tried this "fix"???
http://www.geeklog.net/article.php?story=2002080419482031
Thanks,
M@
4
5
Quote
Anonymous
Anonymous
You don't need to create a new $_CONF variable if there is a clash in cookie names between GL and another integrated package. All you have to do is change the cookie name in:
$_CONF['cookie_password'] = 'password';
to something like this:
$_CONF['cookie_password'] = 'gl_password';
or whatever other cookie has a conflict.
5
4
Quote
Status: offline
mpursley
Forum User
Junior
Registered: 03/27/03
Posts: 18
I just changed my $_CONF['cookie_password'] from "password" to "gl_password" and it still won't logout of the gallery when I logout...
I think my next step is to try this...
http://www.geeklog.net/article.php?story=2002080419482031
Has anyone tried these changes?
M@
4
4
Quote
Status: offline
rawdata
Forum User
Full Member
Registered: 02/17/03
Posts: 236
You can try it, but I'll tell you right now it won't fix the logout problem. That particular article with comments deal with cookie name collisions. In other words, the cookies from two different software applications have the exact same name. As someone pointed out to you already here, you don't need to create a new cookie to get around this. All you have to do is rename the coookie in one or the other so that they have different names. This helps to fix login not logout.
I don't have Gallery installed, but apparently it uses its own set of cookies. To fix the logout problem, I think you either need to delete the corresponding Gallery session and/or set the Gallery cookies so that they expire at the time you logout of Geeklog. You can also further integrate the two so they're using the same cookies for logout and login but this might involve quite a bit of work.
4
4
Quote
Status: offline
mpursley
Forum User
Junior
Registered: 03/27/03
Posts: 18
So I did a search on "slideshow" to try to find out why may gallery
slideshow sometimes is missing a few pictures from the end (still
unsolved by the way) when I came across this little pearl of
wisdom... worked for my site (so far)...
M@
"I experienced the same problem but I managed to solve it by
modifying the init.php under gallery directory as below.
if (isset($_USER["username"])) {
$gallery->session->username = $_USER['username'];
} else if (!empty($gallery->session->username)) {
$gallery->session->username = "";
}
The first two lines are already there which is about line 200, I think.
---
sagnaing;"
-- http://www.geeklog.net/article.php?story=200210062008532
6
4
Quote
Status: offline
mpursley
Forum User
Junior
Registered: 03/27/03
Posts: 18
So I did a search on "slideshow" to try to find out why may gallery
slideshow sometimes is missing a few pictures from the end (still
unsolved by the way) when I came across this little pearl of
wisdom... worked for my site (so far)...
M@
"I experienced the same problem but I managed to solve it by
modifying the init.php under gallery directory as below.
if (isset($_USER["username"])) {
$gallery->session->username = $_USER['username'];
} else if (!empty($gallery->session->username)) {
$gallery->session->username = "";
}
The first two lines are already there which is about line 200, I
think.
---
sagnaing;"
-- http://www.geeklog.net/article.php?story=200210062008532
4
4
Quote
All times are EDT. The time is now 04:35 am.
- Normal Topic
- Sticky Topic
- Locked Topic
- New Post
- Sticky Topic W/ New Post
- Locked Topic W/ New Post
- View Anonymous Posts
- Able to post
- Filtered HTML Allowed
- Censored Content