Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: Wikipedia: Mediawiki

Strange cookie problems when registering/logging in

 

 

Wikipedia mediawiki RSS feed   Index | Next | Previous | View Threaded


admin at t4b

Jun 25, 2012, 9:08 AM

Post #1 of 5 (393 views)
Permalink
Strange cookie problems when registering/logging in

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I volunteered to administrate a wiki which was left to itself for
quite some time.
The previous admin left in a bad way and it's possible he messed stuff
up purposefully before he left.
So I upgraded the wiki to 1.19.1 by copying the LocalSettings.php over
to a folder containing 1.19.1, then commenting out all stuff by the
old admin I didn't like and then using the web updater.
The wiki is running at the moment, but I have one problem: When I try
to register a test account, it doesn't work:
> The user account was not created, as we could not confirm its
> source. Ensure you have cookies enabled, reload this page and try
> again.
When trying to log into my existing account, I get
> PandoraWiki uses cookies to log in users. You have cookies
> disabled. Please enable them and try again.
But cookies are enabled. I even tried another browser to be sure.
The server also has no problems with cookies in principle: I wrote a
test script (see http://wiki.openpandora.de/myCookieTest.php) and I
could set cookies from there just fine.
I also read about the config option to disable the cookie check, so I
put the following line into my LocalSettings.php:
$wgDisableCookieCheck=true;
But that doesn't change anything.
I've also redownloaded MediaWiki, checked whether the downloaded
archive was correct, unpacked it and reuploaded all files again to be
sure there are no problems there.
So now I've kinda run out of ideas what might be the problem.
If you want to see yourself, the wiki is located there:
http://wiki.openpandora.de/index.php?title=Spezial:Anmelden
There are also some problems with some (not all) thumbnails (see the
mainpage), but I haven't really looked into that, it's far down my
priority list at the moment.

- --T4b
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJP6I0SAAoJEEaeg0D8YQ3Uf2YH/0ZEAgfDWCGc90YxlJXAd8wW
Vvhx09YgMs/VutI8GEJCc37zc38tXycTDIfjbTds2VIwUSQtFFO8yvV6FzYdHHeN
Or5a8WmzNJSvYrmS/jkKMkPKEjWx70tDSesB4RdcA8XkzHdI1Nb8PgHukuQuhsAZ
XGTYSCisRmg1CKzMBrNRdaiCo3mW2xI9+QyL5sTEr9DTeN2yTRmp2CNoKPRnKCbu
gOmlgWkkNjtM2uWJuF5O64TfbyfPtRLXttta80TLq63jBKUl4QWqelvwzg1MAJIx
gMhRQBqlNaBRnX0SSILUV54X1OALsw6p+1q524VqqcPlsJ0jmMSd++pdCs7XMYs=
=tQ50
-----END PGP SIGNATURE-----

_______________________________________________
MediaWiki-l mailing list
MediaWiki-l [at] lists
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l


krenair at gmail

Jun 25, 2012, 9:15 AM

Post #2 of 5 (377 views)
Permalink
Re: Strange cookie problems when registering/logging in [In reply to]

Have you tried using diff to reveal what is different between your clean version of MediaWiki and the broken one you've been given?

Krenair

On 25/06/12 17:08, Lukas Bürgi wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I volunteered to administrate a wiki which was left to itself for
> quite some time.
> The previous admin left in a bad way and it's possible he messed stuff
> up purposefully before he left.
> So I upgraded the wiki to 1.19.1 by copying the LocalSettings.php over
> to a folder containing 1.19.1, then commenting out all stuff by the
> old admin I didn't like and then using the web updater.
> The wiki is running at the moment, but I have one problem: When I try
> to register a test account, it doesn't work:
>> The user account was not created, as we could not confirm its
>> source. Ensure you have cookies enabled, reload this page and try
>> again.
> When trying to log into my existing account, I get
>> PandoraWiki uses cookies to log in users. You have cookies
>> disabled. Please enable them and try again.
> But cookies are enabled. I even tried another browser to be sure.
> The server also has no problems with cookies in principle: I wrote a
> test script (see http://wiki.openpandora.de/myCookieTest.php) and I
> could set cookies from there just fine.
> I also read about the config option to disable the cookie check, so I
> put the following line into my LocalSettings.php:
> $wgDisableCookieCheck=true;
> But that doesn't change anything.
> I've also redownloaded MediaWiki, checked whether the downloaded
> archive was correct, unpacked it and reuploaded all files again to be
> sure there are no problems there.
> So now I've kinda run out of ideas what might be the problem.
> If you want to see yourself, the wiki is located there:
> http://wiki.openpandora.de/index.php?title=Spezial:Anmelden
> There are also some problems with some (not all) thumbnails (see the
> mainpage), but I haven't really looked into that, it's far down my
> priority list at the moment.
>
> - --T4b
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.10 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iQEcBAEBAgAGBQJP6I0SAAoJEEaeg0D8YQ3Uf2YH/0ZEAgfDWCGc90YxlJXAd8wW
> Vvhx09YgMs/VutI8GEJCc37zc38tXycTDIfjbTds2VIwUSQtFFO8yvV6FzYdHHeN
> Or5a8WmzNJSvYrmS/jkKMkPKEjWx70tDSesB4RdcA8XkzHdI1Nb8PgHukuQuhsAZ
> XGTYSCisRmg1CKzMBrNRdaiCo3mW2xI9+QyL5sTEr9DTeN2yTRmp2CNoKPRnKCbu
> gOmlgWkkNjtM2uWJuF5O64TfbyfPtRLXttta80TLq63jBKUl4QWqelvwzg1MAJIx
> gMhRQBqlNaBRnX0SSILUV54X1OALsw6p+1q524VqqcPlsJ0jmMSd++pdCs7XMYs=
> =tQ50
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> MediaWiki-l mailing list
> MediaWiki-l [at] lists
> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l



_______________________________________________
MediaWiki-l mailing list
MediaWiki-l [at] lists
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l


jeff at gpf-comics

Jun 25, 2012, 9:23 AM

Post #3 of 5 (383 views)
Permalink
Re: Strange cookie problems when registering/logging in [In reply to]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

After that, check that your PHP session directory is writable by the
user under which your web server daemon is running. I use a
non-standard user/group combination for Apache on my server and end up
locking myself out of my MediaWiki every time I upgrade PHP, since the
upgrade resets the folder permissions for the session folder back to its
defaults. I get the same error message every time that happens.

- --

Jeff Darlington
General Protection Fault
http://www.gpf-comics.com/


On 6/25/2012 12:15 PM, Krenair wrote:
> Have you tried using diff to reveal what is different between your clean
> version of MediaWiki and the broken one you've been given?
>
> On 25/06/12 17:08, Lukas Bürgi wrote:
>
> The wiki is running at the moment, but I have one problem: When I try
> to register a test account, it doesn't work:
>>>> The user account was not created, as we could not confirm its
>>>> source. Ensure you have cookies enabled, reload this page and try
>>>> again.
> When trying to log into my existing account, I get
>>>> PandoraWiki uses cookies to log in users. You have cookies
>>>> disabled. Please enable them and try again.
> But cookies are enabled. I even tried another browser to be sure.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.17 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk/okIkACgkQVNMIBILmfwHeQACfaq/3pFtVa6jKmb6efQEr3wsN
b68An3w+EpdB8j0zHfR9hLP7o8x33clH
=WG2V
-----END PGP SIGNATURE-----

_______________________________________________
MediaWiki-l mailing list
MediaWiki-l [at] lists
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l


admin at t4b

Jun 25, 2012, 9:54 AM

Post #4 of 5 (380 views)
Permalink
Re: Strange cookie problems when registering/logging in [In reply to]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 25.06.2012 18:15, Krenair wrote:
> Have you tried using diff to reveal what is different between your
> clean version of MediaWiki and the broken one you've been given?
>
> Krenair
>
> On 25/06/12 17:08, Lukas Bürgi wrote:
>
> I volunteered to administrate a wiki which was left to itself for
> quite some time. The previous admin left in a bad way and it's
> possible he messed stuff up purposefully before he left. So I
> upgraded the wiki to 1.19.1 by copying the LocalSettings.php over
> to a folder containing 1.19.1, then commenting out all stuff by
> the old admin I didn't like and then using the web updater. The
> wiki is running at the moment, but I have one problem: When I try
> to register a test account, it doesn't work:
>>>> The user account was not created, as we could not confirm
>>>> its source. Ensure you have cookies enabled, reload this page
>>>> and try again.
> When trying to log into my existing account, I get
>>>> PandoraWiki uses cookies to log in users. You have cookies
>>>> disabled. Please enable them and try again.
> But cookies are enabled. I even tried another browser to be sure.
> The server also has no problems with cookies in principle: I wrote
> a test script (see http://wiki.openpandora.de/myCookieTest.php) and
> I could set cookies from there just fine. I also read about the
> config option to disable the cookie check, so I put the following
> line into my LocalSettings.php: $wgDisableCookieCheck=true; But
> that doesn't change anything. I've also redownloaded MediaWiki,
> checked whether the downloaded archive was correct, unpacked it and
> reuploaded all files again to be sure there are no problems there.
> So now I've kinda run out of ideas what might be the problem. If
> you want to see yourself, the wiki is located there:
> http://wiki.openpandora.de/index.php?title=Spezial:Anmelden There
> are also some problems with some (not all) thumbnails (see the
> mainpage), but I haven't really looked into that, it's far down my
> priority list at the moment.
>
> --T4b
>>
>> _______________________________________________ MediaWiki-l
>> mailing list MediaWiki-l [at] lists
>> https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
>
>

Hmm, I don't think this can work. It seems I wasn't clear enough, but
I got a wiki which was full of spam and was on version 1.15. So I made
a clean new install of 1.19.1 by putting the 1.19.1 files in a new
folder and copying the old LocalSettings.php over, editing it to my
liking (leaving the database the same) and running the web updater.
Then I removed the old wiki and moved the new install to where the old
one had been.
And this new install now has the described problems. They weren't
there with the old version, never had problems logging in before.
So I don't have two versions which are identical but for the problems,
if I had them your idea would of course be good.
It only makes sense to diff the LocalSettings.php files, that's a good
idea, maybe something springs to my eye that way which I didn't see
till now. But I just did that and I really think my LocalSettings.php
is okay.

- --T4b
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJP6JfVAAoJEEaeg0D8YQ3UczUH/0hnRMLt0VEetmM8Hmif6ZWR
7Ub3AMfchJz1oLH2o0BoRNa+6VX0nNe9CeomRYBoMVWy41trPcRRqCN5ZxFfgpIh
Hqc6mT57X+4WDXFDo56Ms4yTCUsJhgRkWWmi8w40o47Zu78RxJ49dUUx878uSzLg
xcUH3l4qmF2N4Q+vrWZznfT4RPUcZDfDklaAKGkhGNES8Eb+eYs2cRwXsvWWiiYT
EBqV5skt6meTUmlXUJgivtMmaUEmGiazS5Ai0K99+9K0hxruNHAzV+Bh+NJixVqS
9AFHfVUvBwOBy2QnPC8Kv0x0a0NhtA19qgJYn+15Y49w223/bE1aZC0LbLQe3PU=
=EBHs
-----END PGP SIGNATURE-----

_______________________________________________
MediaWiki-l mailing list
MediaWiki-l [at] lists
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l


Platonides at gmail

Jun 25, 2012, 1:46 PM

Post #5 of 5 (373 views)
Permalink
Re: Strange cookie problems when registering/logging in [In reply to]

On 25/06/12 18:54, Lukas Bürgi wrote:
> Hmm, I don't think this can work. It seems I wasn't clear enough, but
> I got a wiki which was full of spam and was on version 1.15. So I made
> a clean new install of 1.19.1 by putting the 1.19.1 files in a new
> folder and copying the old LocalSettings.php over, editing it to my
> liking (leaving the database the same) and running the web updater.
> Then I removed the old wiki and moved the new install to where the old
> one had been.
> And this new install now has the described problems. They weren't
> there with the old version, never had problems logging in before.
> So I don't have two versions which are identical but for the problems,
> if I had them your idea would of course be good.
> It only makes sense to diff the LocalSettings.php files, that's a good
> idea, maybe something springs to my eye that way which I didn't see
> till now. But I just did that and I really think my LocalSettings.php
> is okay.
>
> --T4b

It isn't sending any cookie, on either
http://wiki.openpandora.de/index.php?title=Spezial:Anmelden&type=signup
nor http://wiki.openpandora.de/index.php?title=Spezial:Anmelden&type=login

As those pages require a session to protect against CSRF, the client
can't ever pass it.
http://wiki.openpandora.de/myCookieTest.php is using a bare setcookie()
and $_COOKIE. Maybe you can make another gist which uses session_start()
and $_SESSION to keep the state?

I suspect it /will/ end up being some session_path related problem.

Regards


_______________________________________________
MediaWiki-l mailing list
MediaWiki-l [at] lists
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

Wikipedia mediawiki RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.