Simple Machines Community Forum

SMF Support => SMF 2.0.x Support => Topic started by: burd on June 18, 2017, 02:32:25 PM

Title: Log on problem w/ 14
Post by: burd on June 18, 2017, 02:32:25 PM
Since the .14 upgrade, we're having problems logging on, it says : session timed out while posting.
You can't log on on that screen, please, if your not helping don't post. 
Title: Re: Log on problem w/ 14
Post by: Shambles on June 18, 2017, 02:35:25 PM
Quote from: burdif your not helping don't post. 

This is probably classed as "not helping", but if you look at some of the topics posted in the past 48 hours you might see your issue addressed already. Several times.

HTH
Title: Re: Log on problem w/ 14
Post by: Kindred on June 18, 2017, 03:57:12 PM
Quote from: Shambles on June 18, 2017, 02:35:25 PM
Quote from: burdif your not helping don't post. 

This is probably classed as "not helping", but if you look at some of the topics posted in the past 48 hours you might see your issue addressed already. Several times.

HTH


Yup...  what he said.  It's been addressed several dozen times.

Specifically, it has to do with your custom theme not being properly modified and you are going to have to manually add in the correct code edits, specifically to the login code
Title: Re: Log on problem w/ 14
Post by: vbgamer45 on June 18, 2017, 09:26:44 PM
If your custom theme has a login form such as in the index.template.php or boardindex.template.php or in the login.template.php

The SMF 2.0.14 now requires the following code added in the <form> tag  just add in the closing </form> tag in any login form.


<input type="hidden" name="', $context['session_var'], '" value="', $context['session_id'], '" />


This code is used to help increase security for SMF.
Title: Re: Log on problem w/ 14
Post by: Sir Osis of Liver on June 18, 2017, 11:00:02 PM
FYI, this bug also seems to affect some forums running Curve, I'm working on one now, here (https://www.simplemachines.org/community/index.php?topic=554604.0).  This has been reported in other topics.
 
Title: Re: Log on problem w/ 14
Post by: Colin on June 19, 2017, 01:02:07 AM
This is not a bug. This is a deliberate security fix that due to limitations in the package manager custom themes may need to make the edit manually or have the theme author update the theme to include this token in the login form.
Title: Re: Log on problem w/ 14
Post by: Sir Osis of Liver on June 19, 2017, 01:07:52 AM
As has been pointed out in other topics, this problem occurred in Curve.  The linked topic is pretty much an out-of-box install, no mods, no other themes.  Looks like she was running 2.0.13 in php 5.6, patched to .14, and login failed.

Title: Re: Log on problem w/ 14
Post by: Kindred on June 19, 2017, 06:02:25 AM
Except, Sir Osis...  THIS poster is *NOT* running the default theme/Curve
Title: Re: Log on problem w/ 14
Post by: Sir Osis of Liver on June 19, 2017, 01:05:42 PM
I know, I posted that as a point of information, as it seems to be related to this login problem.
Title: Re: Log on problem w/ 14
Post by: sturmkatze on December 10, 2017, 12:58:18 AM
I added this code to one theme and it still won't let me in :-o
Title: Re: Log on problem w/ 14
Post by: br360 on December 10, 2017, 01:36:39 AM
Quote from: sturmkatze on December 10, 2017, 12:58:18 AM
I added this code to one theme and it still won't let me in :-o

Your best bet would be to create your own topic with the issue you are having. Also when you do; can you attach your custom theme's index.template.php file as well?
Title: Re: Log on problem w/ 14
Post by: sturmkatze on December 10, 2017, 04:15:31 PM
Quote from: br360 on December 10, 2017, 01:36:39 AM
Quote from: sturmkatze on December 10, 2017, 12:58:18 AM
I added this code to one theme and it still won't let me in :-o

Your best bet would be to create your own topic with the issue you are having. Also when you do; can you attach your custom theme's index.template.php file as well?
I had asked vbgamer about this on his forum and he sent this link. It worked on one of my forum/sites. I have more to try. Sadly, TP is not particularly mobile friendly.
Title: Re: Log on problem w/ 14
Post by: lurkalot on December 10, 2017, 04:30:12 PM
Quote from: sturmkatze on December 10, 2017, 12:58:18 AM
I added this code to one theme and it still won't let me in :-o

Update you version of Tinyportal from TP 1.0  to TP 1.3 it includes the login fix for SMF 2.0.14 /15  Also if you want it responsive you'll need a responsive theme and use TP 1.3R beta from https://www.tinyportal.net
Title: Re: Log on problem w/ 14
Post by: Aleksi "Lex" Kilpinen on December 21, 2017, 03:04:33 PM
Quote from: burd on June 18, 2017, 02:32:25 PM
Since the .14 upgrade, we're having problems logging on, it says : session timed out while posting.
You can't log on on that screen, please, if your not helping don't post. 
Have you been able to sort this out, or are you still experiencing this?
Title: Re: Log on problem w/ 14
Post by: burd on August 16, 2018, 11:57:21 PM
Fixed
Title: Re: Log on problem w/ 14
Post by: Aleksi "Lex" Kilpinen on August 17, 2018, 01:16:34 AM
Thanks for letting us know :)