Simple Machines Community Forum

SMF Support => SMF 1.1.x Support => Topic started by: steve51184 on December 05, 2009, 12:01:09 PM

Title: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: steve51184 on December 05, 2009, 12:01:09 PM
a few members of my site are getting this error and i've googled for an answer but nothing works...

QuoteAn Error Has Occurred!
Session verification failed. Please try logging out and back in again, and then try again.

smf 1.1.11 + subdreamer 2.5.3.2 pro

my settings:

(http://img682.imageshack.us/img682/4789/98946370.png)
(http://img682.imageshack.us/img682/7578/91017156.png)
(http://img682.imageshack.us/img682/9202/77258659.png)
Title: Re: Session verification failed. Please try logging out and back in again....
Post by: Kays on December 05, 2009, 12:04:36 PM
Hi, welcome to SMF. :)

Something to try is to go into the Admin CP, Server Settings > Feature Configuration and set the following:

Enable local storage of cookies - unchecked
Use database driven sessions - checked
Title: Re: Session verification failed. Please try logging out and back in again....
Post by: steve51184 on December 05, 2009, 12:08:57 PM
thanks for the quick reply but i have that already (pic included in first post)
Title: Re: Session verification failed. Please try logging out and back in again....
Post by: Kays on December 05, 2009, 12:16:53 PM
Yah, but you had edited it while I was posting. :P

Normally that resolves login issues as such. Only other thought to check "Use subdomain independent cookies"

Is this happening with any particular browser?
Title: Re: Session verification failed. Please try logging out and back in again....
Post by: steve51184 on December 05, 2009, 12:23:28 PM
Quote from: Kays on December 05, 2009, 12:16:53 PM
Yah, but you had edited it while I was posting. :P

Normally that resolves login issues as such. Only other thought to check "Use subdomain independent cookies"

Is this happening with any particular browser?

i'll try that option... and no a few different browsers so far noting solid
Title: Re: Session verification failed. Please try logging out and back in again....
Post by: steve51184 on December 05, 2009, 12:30:47 PM
right the 'subdomain independent cookies' option didn't work

also it started doing this around the 1.1.11 update...
Title: Re: Session verification failed. Please try logging out and back in again....
Post by: Kays on December 05, 2009, 12:40:43 PM
I updated my forums yesterday and haven't noticed any problems or had any complaints. Yet..

You could try changing the cookie name. Sometimes it helps, but everyone will need to re-login then.

Quote
right the 'subdomain independent cookies' option didn't work

What do you mean by that? What happens?

Could you possibly set up a test account. Just a regular member acount to check the session issue.
Title: Re: Session verification failed. Please try logging out and back in again....
Post by: steve51184 on December 05, 2009, 12:45:10 PM
Quote from: Kays on December 05, 2009, 12:40:43 PM
I updated my forums yesterday and haven't noticed any problems or had any complaints. Yet..

You could try changing the cookie name. Sometimes it helps, but everyone will need to re-login then.

Quote
right the 'subdomain independent cookies' option didn't work

What do you mean by that? What happens?

Could you possibly set up a test account. Just a regular member acount to check the session issue.

according to my members ticking 'subdomain independent cookies' did nothing and there getting the same error

and i've tried to login to a test account (and even there's with there permission) but i can't reproduce the error

and yes i've tried to rename the cookie
Title: Re: Session verification failed. Please try logging out and back in again....
Post by: steve51184 on December 05, 2009, 01:00:48 PM
right i've found the error it was the latest update as i just uninstalled the 1.1.11 update taking me back to 1.1.10 and it's working fine for all members now so it's a problem within the update

i have of course installed the 1.1.11 update again for security reasons but i now know what's causing the problem... is there a fix?
Title: Re: Session verification failed. Please try logging out and back in again....
Post by: Kays on December 05, 2009, 01:09:16 PM
But why is it only happening to a few?

Quote
and i've tried to login to a test account (and even there's with there permission) but i can't reproduce the error

What I meant is so I can check it also. :)

However since it's not doing it for you. I'm wondering if it's happening with a particular browser.

Get them to clear their cache and cookies.
Title: Re: Session verification failed. Please try logging out and back in again....
Post by: steve51184 on December 05, 2009, 01:12:25 PM
Quote from: Kays on December 05, 2009, 01:09:16 PM
But why is it only happening to a few?

Quote
and i've tried to login to a test account (and even there's with there permission) but i can't reproduce the error

What I meant is so I can check it also. :)

However since it's not doing it for you. I'm wondering if it's happening with a particular browser.

Get them to clear their cache and cookies.

i've had people tell me google/firefox so it's not just one browser and i've had them clear there cache/cookies but that didn't work

anyway like my last post said the problem was fixed with removing the latest 1.1.11 update so the problem is with that
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: Kays on December 05, 2009, 01:49:15 PM
If the problem is with the upgrade, it's not a common one. However if you feel that there is a problem feel free to file a bug report in the Bug Reports (http://www.simplemachines.org/community/index.php?board=137.0) forum.

If you don't mind posting or PMing me a login for a test account so I can check it out.

Also, what mods do you have installed?
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: gbsothere on December 05, 2009, 03:04:02 PM
This may or may not help, but it was suggested in the original post of the "SMF 1.1.11 released" thread that if anyone encountered a Session Verification error, to refer to this thread:

http://www.simplemachines.org/community/index.php?topic=278824.msg1829348#msg1829348 (http://www.simplemachines.org/community/index.php?topic=278824.msg1829348#msg1829348)


(Of course, it's entirely possible that I'm misunderstanding the issue.)

:)

Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: Kays on December 05, 2009, 03:11:31 PM
That link seems to be in regards to session verification errors when installing the upgrade.

The case here is not being able to stay logged in.
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: gbsothere on December 05, 2009, 03:13:06 PM
Quote from: Kays on December 05, 2009, 03:11:31 PM
That link seems to be in regards to session verification errors when installing the upgrade.

The case here is not being able to stay logged in.



Ah, well there you go.  I began second-guessing myself, just after posting it.  I should have gone with my instincts and deleted.

Thanks, Kays.   :)
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: Kays on December 05, 2009, 03:19:07 PM
Not a problem. Any input or ideas are welcome. :)
Title: Re: Session verification failed error after 1.1.11 update
Post by: Norv on December 05, 2009, 06:25:58 PM
Please consider using the Support topic you started, as the problem is not reported by anyone else and it seems very unlikely to be a bug. Rest assured that in case your support topic proves there is a bug in SMF related to this, it will be reconsidered.

Until that, I will merge this topic to the support topic, for the moment. Please can you still consider to provide a test account, normal member account, so we can test eventually with different browsers and see if we can replicate anything?

Please also tell a list of the mods you have installed.

Also, do you have .htaccess file(s) in your web directory or SMF directory?

Also, can you please copy paste the errors in your forum error log, here.
Title: Re: Session verification failed error after 1.1.11 update
Post by: steve51184 on December 05, 2009, 06:30:09 PM
Quote from: Norv on December 05, 2009, 06:25:58 PM
Please consider using the Support topic you started, as the problem is not reported by anyone else and it seems very unlikely to be a bug. Rest assured that in case your support topic proves there is a bug in SMF related to this, it will be reconsidered.

Until that, I will merge this topic to the support topic.

i was only doing what Kays suggested... anyway can i get some help on this please? :)
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: Norv on December 05, 2009, 06:45:57 PM
Of course, I'm sorry, I didn't mean there is anything wrong with it. :)
I just think it needs more investigation, myself. Please see my previous post, I edited it, for further things we might find useful to verify, and please consider trying to answer them.
Title: Re: Session verification failed error after 1.1.11 update
Post by: steve51184 on December 05, 2009, 07:29:50 PM
Quote from: Norv on December 05, 2009, 06:25:58 PM
Please also tell a list of the mods you have installed.

i have MANY mods installed but 99% of them where installed manually so i don't have a list sorry

Quote from: Norv on December 05, 2009, 06:25:58 PM
Also, do you have .htaccess file(s) in your web directory or SMF directory?

yes in my www root (not my smf root) http://paste2.org/p/549127

Quote from: Norv on December 05, 2009, 06:25:58 PM
Also, can you please copy paste the errors in your forum error log, here.

i had the error log off but i'll turn it back on and post some when they come in :)
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: steve51184 on December 05, 2009, 10:05:07 PM
anyone have any ideas?
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: Norv on December 05, 2009, 10:27:33 PM
Could you please consider to uninstall pretty urls then try again?

Also, please try posting the errors in the error log.
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: steve51184 on December 05, 2009, 10:43:01 PM
Quote from: Norv on December 05, 2009, 10:27:33 PM
Could you please consider to uninstall pretty urls then try again?

Also, please try posting the errors in the error log.

i don't have the 'pretty urls' mod installed and there's no errors in my error log
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: Norv on December 05, 2009, 10:56:12 PM
Did you have any errors during update, like a "warning" that a test failed in one or more of your files? We still need to know how your files were modified, to try understanding how could they lead to this effect.
Also, please make sure you do ask people who have the problem to login, then check the error log.
Is there anything relating them? Are they many?

Also, please consider providing a test account, unless that is a problem for you, of course.
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: steve51184 on December 05, 2009, 11:15:24 PM
Quote from: Norv on December 05, 2009, 10:56:12 PM
Did you have any errors during update, like a "warning" that a test failed in one or more of your files? We still need to know how your files were modified, to try understanding how could they lead to this effect.
Also, please make sure you do ask people who have the problem to login, then check the error log.
Is there anything relating them? Are they many?

Also, please consider providing a test account, unless that is a problem for you, of course.

no warning during the install and no errors at all as it all went fine
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: terrycsa on December 06, 2009, 02:21:38 PM
I have been having the same problem with my forum both before and after updating. I haven't changed any mods or coding. It is happening with all members as well as admin.

The only thing I seem able to do is refresh after the error message, return to main forum, and refresh again. This seems to work. It isn't that you aren't being logged in, only that it is not showing as logged in until after I take the above steps.

It is frustrating more for my members. I just find it an inconvenience.  But would like to fix it.

Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: Norv on December 06, 2009, 04:42:40 PM
Please tell if and what errors are in the error log, when the users or yourself experience the issue.
When exactly does the message happen, at login, or anything else?
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: steve51184 on December 06, 2009, 05:07:51 PM
Quote from: terrycsa on December 06, 2009, 02:21:38 PM
I have been having the same problem with my forum both before and after updating. I haven't changed any mods or coding. It is happening with all members as well as admin.

The only thing I seem able to do is refresh after the error message, return to main forum, and refresh again. This seems to work. It isn't that you aren't being logged in, only that it is not showing as logged in until after I take the above steps.

It is frustrating more for my members. I just find it an inconvenience.  But would like to fix it.

please don't hijack my thread.. make your own please ;)

Quote from: Norv on December 06, 2009, 04:42:40 PM
Please tell if and what errors are in the error log, when the users or yourself experience the issue.
When exactly does the message happen, at login, or anything else?

there's nothing in the error log other then a few incorrect passwords etc
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: Norv on December 06, 2009, 05:10:45 PM
When exactly does the problem happen? The URL in the address bar, of the page that says "session verification failed" could be very useful.
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: steve51184 on December 06, 2009, 05:17:26 PM
i'll post a few quotes from my members:

QuoteI get these errors, I tried logging in again and it comes back after like 10 secs. I tried, different browser, different computer at a different house. Not quite sure whats causing this, I get like one more error of this it says something else might post it.

Quotehmm ..i had the same error too but that happened with google chorme beta version but than i changed to stable version and all set now ....

i'm asking them for the URL now won't be long
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: steve51184 on December 06, 2009, 05:40:00 PM
right i got a reply about the URL and it's quite interesting

http://domain.com/forum/index.php?action=collapse;c=5;sa=collapse;#5

and he got this by going to http://domain.com/forum :-\
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: steve51184 on December 06, 2009, 05:55:57 PM
wait i think i know the problem... my members are clicking a link in my top menu that links to:

http://domain.com/forum/index.php?action=collapse;c=5;sa=collapse;#5

and that has no session ID in the url like this:

http://domain.com/forum/index.php?action=collapse;c=5;sa=expand;sesc=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx#5

this has never been a problem before but an update to smf 1.1.11 must of done something... ideas?
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: Norv on December 06, 2009, 06:01:28 PM
That must definitely be it. The update to 1.1.11 has made among others, a series of tests of user's validity of sessions (for security reasons). But it should have (of course) added the right tokens to the links as well.
Is that link a SMF link as it seems? Is it from a custom theme? It looks to me like the link to expand/collapse categories.
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: steve51184 on December 06, 2009, 06:12:02 PM
Quote from: Norv on December 06, 2009, 06:01:28 PM
That must definitely be it. The update to 1.1.11 has made among others, a series of tests of user's validity of sessions (for security reasons). But it should have (of course) added the right tokens to the links as well.
Is that link a SMF link as it seems? Is it from a custom theme? It looks to me like the link to expand/collapse categories.

it's not a link from smf it's one from a custom theme that links to one of my categories i say links to and not expand/collapse as i have that turned off and it's been on the site for years but JUST stopped working :\

also i notice that smf 2.x doesn't have this?

p.s. how do i now link to a board?
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: Norv on December 06, 2009, 06:44:24 PM
That link is a link to expand/collapse categories. Apparently, it can be used to link to the category too, as the action to expand/collapse is forbidden on your forum, it just shows the category. I tested on my forum: it tries to expands/collapses categories. (and succeeds only if collapsing is enabled).

To link to a board: http://your_domain.com/index.php?board=1.0 (replace 1 with your board ID)
To link to a category, please try using instead: http://your_domain.com/index.php#c1 (replace 1 with your category ID). It should work if your forum is still set to show the all the categories and boards at http://your_domain.com/index.php.

If the link comes from a custom theme, you may want to report the problem to the theme author, because I suspect that themes creating their own link didn't have to include the token in links to the collapse action before 1.1.11, as you report, and have to do that now. Most of the themes should have no problem, because they probably use SMF's variable for this collapse action:
$context['categories'][$row_board['ID_CAT']['collapse_href']. Which already contains the necessary token, after 1.1.11.
Apparently your theme might have created the link itself, instead of using the above variable, or your variable value is not filled in BoardIndex.php. Posting the file where the link from the theme is (perhaps ./Themes/your_theme/BoardIndex.template.php) and the file where the variable to use for the link should be filled by SMF 1.1.11 (./Sources/BoardIndex.php), might help us see for sure which needs to be modified, to be working as it should.
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: steve51184 on December 06, 2009, 06:56:21 PM
Quote from: Norv on December 06, 2009, 06:44:24 PM
That link is a link to expand/collapse categories. Apparently, it can be used to link to the category too, as the action to expand/collapse is forbidden on your forum, it just shows the category. I tested on my forum: it tries to expands/collapses categories. (and succeeds only if collapsing is enabled).

To link to a board: http://your_domain.com/index.php?board=1.0 (replace 1 with your board ID)
To link to a category, please try using instead: http://your_domain.com/index.php#c1 (replace 1 with your category ID). It should work if your forum is still set to show the all the categories and boards at http://your_domain.com/index.php.

the links the the categories works now (it's index.php#1 and not index.php#c1) and it should solve the problem but we'll see :)

thank you...

Quote from: Norv on December 06, 2009, 06:44:24 PM
If the link comes from a custom theme, you may want to report the problem to the theme author, because I suspect that themes creating their own link didn't have to include the token in links to the collapse action before 1.1.11, as you report, and have to do that now. Most of the themes should have no problem, because they probably use SMF's variable for this collapse action:
$context['categories'][$row_board['ID_CAT']['collapse_href']. Which already contains the necessary token, after 1.1.11.
Apparently your theme might have created the link itself, instead of using the above variable, or your variable value is not filled in BoardIndex.php. Posting the file where the link from the theme is (perhaps ./Themes/your_theme/BoardIndex.template.php) and the file where the variable to use for the link should be filled by SMF 1.1.11 (./Sources/BoardIndex.php), might help us see for sure which needs to be modified, to be working as it should.

it's not a custom theme it's a theme/portal around smf from subdreamer cms :)
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: Norv on December 06, 2009, 06:59:22 PM
Quote from: ppbz on December 06, 2009, 06:56:21 PM
Quote from: Norv on December 06, 2009, 06:44:24 PM
If the link comes from a custom theme, you may want to report the problem to the theme author, because I suspect that themes creating their own link didn't have to include the token in links to the collapse action before 1.1.11, as you report, and have to do that now. Most of the themes should have no problem, because they probably use SMF's variable for this collapse action:
$context['categories'][$row_board['ID_CAT']['collapse_href']. Which already contains the necessary token, after 1.1.11.
Apparently your theme might have created the link itself, instead of using the above variable, or your variable value is not filled in BoardIndex.php. Posting the file where the link from the theme is (perhaps ./Themes/your_theme/BoardIndex.template.php) and the file where the variable to use for the link should be filled by SMF 1.1.11 (./Sources/BoardIndex.php), might help us see for sure which needs to be modified, to be working as it should.

it's not a custom theme it's a theme/portal around smf from subdreamer cms :)

Well, it's still custom. It might be helpful to them to notify them that that link doesn't work anymore after 1.1.11 and they need to add the session token to it now, (or use something else, like my example above), to be compatible with 1.1.11.
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: steve51184 on December 06, 2009, 07:01:58 PM
Quote from: Norv on December 06, 2009, 06:59:22 PM
Quote from: ppbz on December 06, 2009, 06:56:21 PM
Quote from: Norv on December 06, 2009, 06:44:24 PM
If the link comes from a custom theme, you may want to report the problem to the theme author, because I suspect that themes creating their own link didn't have to include the token in links to the collapse action before 1.1.11, as you report, and have to do that now. Most of the themes should have no problem, because they probably use SMF's variable for this collapse action:
$context['categories'][$row_board['ID_CAT']['collapse_href']. Which already contains the necessary token, after 1.1.11.
Apparently your theme might have created the link itself, instead of using the above variable, or your variable value is not filled in BoardIndex.php. Posting the file where the link from the theme is (perhaps ./Themes/your_theme/BoardIndex.template.php) and the file where the variable to use for the link should be filled by SMF 1.1.11 (./Sources/BoardIndex.php), might help us see for sure which needs to be modified, to be working as it should.

it's not a custom theme it's a theme/portal around smf from subdreamer cms :)

Well, it's still custom. It might be helpful to them to notify them that that link doesn't work anymore after 1.1.11 and they need to add the session token to it now, (or use something else, like my example above), to be compatible with 1.1.11.

it's a link i've added to the menu that was done before 1.1.11 so after the update it stopped working due to no token but i've fixed it now (if this was the problem to begin with)
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: Norv on December 06, 2009, 07:04:50 PM
Great then, good to see the problem solved!
I am marking this topic as solved, but please feel free to reopen it in case you may need more assistance on this matter. :)
Title: Re: [1.1.11 update problem] Session verification failed. Please try logging out.....
Post by: steve51184 on December 06, 2009, 07:06:45 PM
will do and thank you again