Advertisement:

Author Topic: SMF 1.1.7: Session verification failed when installing mods or SMF 1.1.8 update  (Read 85093 times)

Offline SlammedDime

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 10,278
  • School of Air Ride
    • Matt Zuba.com
Bug #2734: FTP Permissions causes package installation to fail
Unfortunately, it seems that in one of our recent security releases (SMF 1.1.7), the security fix created a bug that may affect some installations of SMF depending on the server configuration.

If you have this problem when upgrading to SMF 1.1.8 or when installing mods on SMF 1.1.7, please use the fix below.

If, after applying this fix, you still have the problem, please try packages on the default theme.  If the problem still persists using the default 'core' theme, please create a new topic, do not post support questions in this topic.

Open Sources/Packages.php

Code: (Find) [Select]
function PackageInstallTest()
{
    global $boarddir, $txt, $context, $scripturl, $sourcedir, $modSettings;

    checkSession('get');

Code: (Replace) [Select]
function PackageInstallTest()
{
    global $boarddir, $txt, $context, $scripturl, $sourcedir, $modSettings;

    checkSession('request');
« Last Edit: February 08, 2009, 10:16:25 AM by SlammedDime »
SlammedDime
Former Lead Customizer
BitBucket Projects
GeekStorage.com Hosting
                      My Mods
SimpleSEF
Ajax Quick Reply
Sitemap
more...
                      If your inquiry does not involve support or coding questions, feel free to PM me.  I am  available for custom work.

Offline gietl

  • Semi-Newbie
  • *
  • Posts: 31
Re: SMF 1.1.7: Session verification failed error when installing mods
« Reply #1 on: December 12, 2008, 10:55:57 AM »
Awesome! I was having this problem and this solution worked perfectly.

Online welshdog

  • Semi-Newbie
  • *
  • Posts: 91
  • Gender: Male
    • Australian Opinion
Re: SMF 1.1.7: Session verification failed error when installing mods
« Reply #2 on: December 13, 2008, 08:49:08 PM »
Made no difference to my 'Session Verification Error" issues though I was directed here because my 'vanilla install' rfused to let me access any part of the site whilst 'logged in'.

Offline farzad

  • Semi-Newbie
  • *
  • Posts: 72
    • The Milwaukee Scene
Re: SMF 1.1.7: Session verification failed error when installing mods
« Reply #3 on: December 18, 2008, 09:37:35 AM »
worked for me.  thanks!

Offline bujuk

  • Semi-Newbie
  • *
  • Posts: 15
Re: SMF 1.1.7: Session verification failed error when installing mods
« Reply #4 on: December 18, 2008, 10:47:53 AM »
Thanks.  just solve my headache  :D

Offline BaikPunyo

  • Newbie
  • *
  • Posts: 4
Re: SMF 1.1.7: Session verification failed error when installing mods
« Reply #5 on: December 19, 2008, 02:20:30 PM »
thanks SlammedDime.. It's work 100%

Offline Regashi

  • Jr. Member
  • **
  • Posts: 158
  • Gender: Male
  • Legacy Scripter
    • Legacy Studios
Re: SMF 1.1.7: Session verification failed error when installing mods
« Reply #6 on: December 19, 2008, 06:15:52 PM »
derrr

Offline Joey Smith™

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 6,356
  • Gender: Male
Re: SMF 1.1.7: Session verification failed error when installing mods
« Reply #7 on: December 21, 2008, 03:44:18 PM »
Could we get this added to the "useful manual links" options for the support volunteers? It sure would help :)

Offline sheryltoo

  • Jr. Member
  • **
  • Posts: 282
    • Sheryl's Page
Re: SMF 1.1.7: Session verification failed error when installing mods
« Reply #8 on: December 21, 2008, 07:13:03 PM »
I'm not sure were I'm suppose to look for that code that needs to be replaced.
Could someone please direct me to the right area?
Thanks.
Sheryl

Offline SlammedDime

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 10,278
  • School of Air Ride
    • Matt Zuba.com
SlammedDime
Former Lead Customizer
BitBucket Projects
GeekStorage.com Hosting
                      My Mods
SimpleSEF
Ajax Quick Reply
Sitemap
more...
                      If your inquiry does not involve support or coding questions, feel free to PM me.  I am  available for custom work.

Offline waterrat

  • Newbie
  • *
  • Posts: 8
Re: SMF 1.1.7: Session verification failed error when installing mods
« Reply #10 on: December 21, 2008, 08:33:27 PM »
Thanks for this fix--it worked for one mod install, then I've had problems with every mod install since.  I had to manually add a temp file set to 777 to install any other mods--and even then, the mods read as installed, but aren't.  Is there something I'm missing?

I opened a topic specifically on my issue: http://www.simplemachines.org/community/index.php?topic=281517.0

I just wondered if my problem and is related to the Verification Error or not.

Offline Rebochan

  • Newbie
  • *
  • Posts: 8
Re: SMF 1.1.7: Session verification failed error when installing mods
« Reply #11 on: December 21, 2008, 10:20:55 PM »
I can't find the text in that .php file.  There's something completely different instead.  I'm using the latest version of SMF.  I *think* this is the right spot - it starts on line 144.  But as you can see, it's nothing like the code in the first post...

Code: [Select]
function PackageInstallTest()
{
global $boarddir, $txt, $context, $scripturl, $sourcedir, $modSettings;

// You have to specify a file!!
if (!isset($_REQUEST['package']) || $_REQUEST['package'] == '')
redirectexit('action=packages');
$context['filename'] = preg_replace('~[\.]+~', '.', $_REQUEST['package']);

require_once($sourcedir . '/Subs-Package.php');

// Load up the package FTP information?
if (isset($_SESSION['pack_ftp']))
packageRequireFTP($scripturl . '?action=packages;sa=' . $_REQUEST['sa'] . ';package=' . $_REQUEST['package']);

Offline SlammedDime

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 10,278
  • School of Air Ride
    • Matt Zuba.com
Re: SMF 1.1.7: Session verification failed error when installing mods
« Reply #12 on: December 21, 2008, 10:27:31 PM »
Rebochan, as I said in the first post , please create your own support topic.

It does not look like you have the 'latest' version of smf... if the top of the file does not say SMF 1.1.7, then you do not.  Please start your own topic though.
SlammedDime
Former Lead Customizer
BitBucket Projects
GeekStorage.com Hosting
                      My Mods
SimpleSEF
Ajax Quick Reply
Sitemap
more...
                      If your inquiry does not involve support or coding questions, feel free to PM me.  I am  available for custom work.

Offline J-Bird

  • Semi-Newbie
  • *
  • Posts: 32
  • Gender: Male
    • Gears of Gaming
Re: SMF 1.1.7: Session verification failed error when installing mods
« Reply #13 on: December 27, 2008, 01:08:13 PM »
After over a month of not getting any resolution on this same problem, I found out my problem is related to the FPS theme.
If I change to the default theme , then I can make changes to the mods, and change back to FPS after.
Perhaps this may help someone else.
Love, often

Offline gtowntalk

  • Newbie
  • *
  • Posts: 7
Re: SMF 1.1.7: Session verification failed error when installing mods
« Reply #14 on: December 28, 2008, 01:37:05 PM »
No go. I have reinstall 1x and 2x and tried to follow all "fixes" and none work for  me. I do want to point out that use a linux box with centos 5.2 and my own hosting software (i.e. not cpanel or any of the typicals) and therefore do not use /home/user/public_htem/site...... my sites are /var/www/username/web/site and my ftp is /web/site

When i install smf it keeps reporting that it found my path as /username/web but when i enter all  the other info on the first page of the installation it reports that that path does not exist (it does by the way) but if i remove the [/username] part and just leave [/web] it installs and looks like all is good. but none of the mods will install...i get session verif....error.

any help would be great!! :)

Offline G6™

  • Sr. Member
  • ****
  • Posts: 961
  • Gender: Female
    • My Playground
Re: SMF 1.1.7: Session verification failed error when installing mods
« Reply #15 on: December 29, 2008, 12:28:00 PM »
From first post
Quote
If, after applying this fix, you still have the problem, please try packages on the default theme.  If the problem still persists using the default 'core' theme, please create a new topic, do not post support questions in this topic.

From 10th post

Quote
Rebochan, as I said in the first post , please create your own support topic.

It does not look like you have the 'latest' version of smf... if the top of the file does not say SMF 1.1.7, then you do not.  Please start your own topic though.

Offline slnurajar

  • Semi-Newbie
  • *
  • Posts: 99
Re: SMF 1.1.7: Session verification failed error when installing mods
« Reply #16 on: December 29, 2008, 12:39:52 PM »
Hi i downloaded smf 1.17 only now, is i need to follow  instructions in this topic and whether this is corected in smf 2.0 beat 4 public

Offline SlammedDime

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 10,278
  • School of Air Ride
    • Matt Zuba.com
Re: SMF 1.1.7: Session verification failed error when installing mods
« Reply #17 on: December 29, 2008, 12:49:34 PM »
This will not be fixed until 1.1.8, so yes, you do need to apply this fix if you have the problem.

This currently is not needed for 2.0 Beta 4, thus the title stating 1.1.7.
SlammedDime
Former Lead Customizer
BitBucket Projects
GeekStorage.com Hosting
                      My Mods
SimpleSEF
Ajax Quick Reply
Sitemap
more...
                      If your inquiry does not involve support or coding questions, feel free to PM me.  I am  available for custom work.

Offline kushari

  • Newbie
  • *
  • Posts: 1
Re: SMF 1.1.7: Session verification failed error when installing mods
« Reply #18 on: December 30, 2008, 12:31:22 AM »
amazing worked perfectly!

Offline mortymoose

  • Semi-Newbie
  • *
  • Posts: 88
Re: SMF 1.1.7: Session verification failed error when installing mods
« Reply #19 on: December 30, 2008, 01:53:24 AM »
Thanks 4 That, I was a wee bit worried, works like a boeing!   ;)