Initial login page takes data, but remains the same

[asmecher]

Hi Renato,

The login form on the login page has a blank "target" attribute; looking in lib/pkp/templates/user/login.tpl, the form target should come from the $loginUrl variable. That variable is set in PHP in lib/pkp/pages/login/PKPLoginHandler.inc.php around line 59, with a value that comes from pages/login/LoginHandler.inc.php in the _getLoginUrl function. Is there a chance your installation has modifications in any of these files that might affect those parts?

Regards,
Alec Smecher
Public Knowledge Project Team

[mendesrocha]

Hi Alec,

Thanks for your attention. You were very precise.

There was a .rej file in lib/pkp/pages/login/ directory. Functions around line 59 had empty arguments, like "function implicitAuthReturn()"

So I updated the file content with github and now page login is working.

Thanks a lot!

[asmecher]

Hi Renato,

Great, glad it's working again.

Regards,
Alec Smecher
Public Knowledge Project Team

[dionphp]

I have a similar problem. I can do a password reset. I do receive a new password from OJS. Then OJS forces you to change the passwrod that was just emailed. I then do so. I can't login immediately, it returns me to the login screen again and again, it does not show a invalid login or invalid password. I have tried with a wrong password and it doies then show the correct error. However, if I leave the browser window with OJS running open after trying to login with the changed password that is after about 5 then I am able toi access all menus as admin without having to login again. This is peculiar, any suggestions will be appreciated.

Here is the URL http://www.uvibusiness.net/ojs

[asmecher]

Hi dionphp,

You've posted essentially the same question on several threads now, and haven't answered the questions I asked here or here. Please don't double-post, and please let me know what you've tried.

Regards,
Alec Smecher
Public Knowledge Project Team

[dionphp]

Hi dionphp,

You've posted essentially the same question on several threads now, and haven't answered the questions I asked here or here. Please don't double-post, and please let me know what you've tried.

Regards,
Alec Smecher
Public Knowledge Project Team

Alec

I have done the following:

session_check_ip' is disabled
checked cookies on and OJSSID cookie is set

What is strange for me is that when I use password reset, try to login with the new password it does not allow me at first but if I leave it for a while say 5 to 10 minutes and I go back to that window I am logged in as admin and can use the software.

Dion

[asmecher]

Hi Dion,

From your post at http://pkp.sfu.ca/support/forum/viewtopic.php?f=8&t=920&start=15#p33967 it looks like the "debug" setting is currently turned on. If that's the case, please turn it off again -- it's probably getting in the way of setting cookies.

Regards,
Alec Smecher
Public Knowledge Project Team

[Kavitamin]

Dear Alec,

I am unable to log in from other computers to my journal at www.psjt.co.uk. I can log in on my computer and create new users on other computers, but the login page just flashes up with no error message. I am a novice with computers, do you know how i can correct this? Please be basic in your explanataions,

Many thanks,
Kav

[asmecher]

Hi Kav,

Have you tried any of the solutions suggested here in the forums or in our FAQ?

Regards,
Alec Smecher
Public Knowledge Project Team

[Kavitamin]

Hi Alec,

I'm not so familiar with programming spiel, but the section i think you were referring to reads: Apologies for pasting it all out, i just don't know which parts i should be looking at. Any help as always would be much appreciated. There is more text in this file but didn't want to take up the whole blog:

import('classes.handler.Handler');

class PKPLoginHandler extends Handler {

/**
* Display user login form.
* Redirect to user index page if user is already validated.
*/
function index() {
$this->validate();
$this->setupTemplate();
if (Validation::isLoggedIn()) {
PKPRequest::redirect(null, 'user');
}

if (Config::getVar('security', 'force_login_ssl') && Request::getProtocol() != 'https') {
// Force SSL connections for login
PKPRequest::redirectSSL();
}

$sessionManager =& SessionManager::getManager();
$session =& $sessionManager->getUserSession();

$templateMgr =& TemplateManager::getManager();

// If the user wasn't expecting a login page, i.e. if they're new to the
// site and want to submit a paper, it helps to explain why they need to
// register.
if(Request::getUserVar('loginMessage'))
$templateMgr->assign('loginMessage', Request::getUserVar('loginMessage'));

$templateMgr->assign('username', $session->getSessionVar('username'));
$templateMgr->assign('remember', Request::getUserVar('remember'));
$templateMgr->assign('source', Request::getUserVar('source'));
$templateMgr->assign('showRemember', Config::getVar('general', 'session_lifetime') > 0);

// For force_login_ssl with base_url[...]: make sure SSL used for login form
$loginUrl = $this->_getLoginUrl();
if (Config::getVar('security', 'force_login_ssl')) {
$loginUrl = String::regexp_replace('/^http:/', 'https:', $loginUrl);
}
$templateMgr->assign('loginUrl', $loginUrl);

$templateMgr->display('user/login.tpl');
}

/**
* Handle login when implicitAuth is enabled.
* If the user came in on a non-ssl url - then redirect back to the ssl url
*/
function implicitAuthLogin() {
if (Request::getProtocol() != 'https')
PKPRequest::redirectSSL();

$wayf_url = Config::getVar("security", "implicit_auth_wayf_url");

if ($wayf_url == "")
die("Error in implicit authentication. WAYF URL not set in config file.");

$url = $wayf_url . "?target=https://" . Request::getServerHost() . Request::getBasePath() . '/index.php/index/login/implicitAuthReturn';

PKPRequest::redirectUrl($url);
}

/**
* This is the function that Shibboleth redirects to - after the user has authenticated.
*/
function implicitAuthReturn() {
$this->validate();

if (Validation::isLoggedIn()) {
PKPRequest::redirect(null, 'user');
}

// Login - set remember to false
$user = Validation::login(Request::getUserVar('username'), Request::getUserVar('password'), $reason, false);

PKPRequest::redirect(null, 'user');

[asmecher]

Hi Kavitamin,

Please check e.g. http://pkp.sfu.ca/wiki/index.php/PKP_Frequently_Asked_Questions#I.27m_having_problems_logging_in_--_after_I_try_to_log_in.2C_I.27m_referred_back_to_the_login_page..

Regards,
Alec Smecher
Public Knowledge Project Team

[Kavitamin]

Dear Alec,

This was the first thing we tried. If you register with the journal despite privacy settings, you will be unable to login. I have sent an e-mail to pkp to get into contact with you with more code from various files. Very keen to get this sorted before end of the month. Your help is much appreciated,

Regards,

Kavit

[asmecher]

Hi Kavit,

Have you tried this using another web browser to verify if that makes a difference? Google Chrome or Firefox should be available on pretty much any platform.

Regards,
Alec Smecher
Public Knowledge Project Team

[Kavitamin]

Dear Alec,

I have sent an e-mail to pkp directed to you as well a few days ago to display what code i get. I have checked on firefox and lots of other browsers on other peoples comps including my own machine with privacy settings to a minimum a few weeks back and checked again now with no avail. Still flashes to log in screen other than on my ipad, iphone and mac computer which logs in normally with fake accounts ive set up.

Kav

[asmecher]

Hi Kav,

Is the session_check_ip option turned on in config.inc.php? If so, turn it off.

Regards,
Alec Smecher
Public Knowledge Project Team