Page 1 of 1

User management doesn't work properly

Posted: Fri May 13, 2005 10:17 pm
by Guest
Hello,
hope you can help me. The following problem:

An admin-user with the user-level "255" creates an user-account with the level "1". The user with the level 1 does a login and wants to create a user with the level "0". Done. Everything works fine till now.
BUT: The user with the level "0" can't login now.
"Wrong password or username" is told to me, although the data was typed in right.
In the database's table "prefix_authors" the password for EVERY User with the level "0" is d41d8cd98f00b204e9800998ecf8427e.
The field "eMail" contains no data, even though I typed it in, when creating the user.

If I try to create an user-account with the level "0" as admin with the level 255, everything works. But the user with the level 1 can't create an user-account with level "0" (see above).

PLEASE help me, I don't know, what's the problem is!
Thanks for answering and have a nice weekend,

Steve.

Re: User management doesn't work properly

Posted: Sat May 14, 2005 2:34 pm
by garvinhicking
I just tried this with the 0.8 final release version and could create the users without a problem.

Can you give me access to your s9y installation so that I could try to add that user? It may also be Browser problems or Cookie problems...

Regards,
Garvin

Posted: Sat May 14, 2005 5:22 pm
by Guest
hi,
did you allready change anything? well, I hope so, because it's working now. if you should have changed something, please let me know - the s9y installation mentioned above is on my test-server and if you've changed something, I have to change it on the "really important" version, too.

if you didn't change anything, I don't understand anything anymore, because today morning it was like posted above. and I didn't change anything (browser-settings or things like that). strange thing...

regards,
steve.

Posted: Sat May 14, 2005 5:30 pm
by Guest
argh, no, it doesn't work perfectly now. the point is: the first 0-leveled user, created by a 1-leveled user can't log in (there's the above posted md5-password and no emailadress).
if the 1-leveled user creates another new 0-leveled user, this one can log in and any other 0-leveled user created after that also is able to log in.
scary.

Posted: Sun May 15, 2005 1:26 am
by garvinhicking
You areusing Serendipity 0.7.1, this is of course not suggested. It could very well be a bug, upgrade to the latest recommended version please.

Regards,
Garvin

Posted: Wed May 18, 2005 4:37 pm
by fkit
garvinhicking wrote:You areusing Serendipity 0.7.1, this is of course not suggested. It could very well be a bug, upgrade to the latest recommended version please.
Yes, this is a Bug in 0.7.1

serendipity_admin_users.inc.php:
Change Line 34:
$enc_pass = md5($_POST['pass']);

To:
$enc_pass = md5($_POST['password']);

And the Usermanagement works.

Bye,
Klaus