News:

Bored?  Looking to kill some time?  Want to chat with other SMF users?  Join us in IRC chat or Discord

Main Menu

[SMF 2.0] security question causes registration error

Started by rtil, September 19, 2011, 03:38:50 AM

Previous topic - Next topic

rtil

after pressing "register", they receive the error message:
QuoteAn Error Has Occurred!
You are not allowed to access this section
there was an error in the error log about the variable "theme_allow" not existing, but i fixed this by re-saving the theme options in the admin center.

now there are no errors in the error log being generated on registration, but people still cannot register.


forum link: http://thebackalleys.com/forum/
installed mods:
1.    ResizeImagesToFitScreen    0.1.6
2.    Spoiler Tag    0.7.2a
3.    Member Awards    2.2.3
4.    Search Focus Dropdown    1.6.0    
5.    Gamer IDs    1.3    
6.    Socialize    1.3
7.    SMF Multi Quote    1.1.3
8.    Aeva ~ Auto-Embed Video & Audio    7.1

i'm a bit lost here as i've never modified the registration page, i don't believe any of my mods affect the registration page, and there are no errors produced in the error log when someone attempts to register.

thank you for any help.

rtil

ok, a quick update on this. i have sort of solved this, but it is not the way i would like to keep things.

i have 1 security question for my members. the question is, "what is 5+3"? with the answer 8.

i tell it to set 1 question.

but there are 4 row for possible questions. there is no option to remove a row.

i do not know if this makes any difference, but when i set the # of questions to answer from 1 to 0, the error goes away, and people can now register.

so, i guess the error has something to do with my security question?

i would like to have this back because i do not use captcha (i hate reading those things and most bots can bypass them easily). i have used "human questions" for years and stopped 99% of spam.

any help with this would be most appreciated.

rtil


Illori

rtil please do not bump within 24 hours we are all volunteers and reply if and when we know the answer

rtil

ok...so it begins. bump  :-\

this is urgent to me because i am being flooded with spambots and captcha doesn't appear (blank image).



rtil

when users tried to register with my security question, after registering it would just take them to an error page that said
QuoteAn Error Has Occurred!
You are not allowed to access this section

when i turned the registration question off, this didn't happen anymore.

however, now my forum is being flooded with spambots because CAPTCHA just doesn't show up (blank image). so i have no registration security at the moment.

this is my forum link: http://www.thebackalleys.com/forum/

i have no mods that interfere with CAPTCHA or registration questions.

any ideas as to why a security question would cause an error?

the question was "what is 5+3?" with the answer "8".

when i enabled security question, it gave me 4 rows of questions with no options to add or remove rows. i left the rest of the rows blank.

where are security questions stored? i have a feeling this could be fixed manually, but i couldn't figure out where they were.

busterone

#8
immediately above the area to set the questions and answers is a block for -
Number of verification questions user must answer
(0 to disable; questions are set below)

Did you have 1 in that box?

I cannot get to your default theme by using http://www.thebackalleys.com/forum/index.php?theme=1
I suspect the captcha issue is theme related. Have you tried in the default theme to see if it works there?


busterone

rtil, have you tried the default theme to see if the issue is there as well yet?

rtil

yes it is also there.

i want to stress that my SMF installation was a conversion from IPB 2.2.0, and after doing so, nearly all the settings were wiped and i had to restore many of them manually.

i have also already run repair_settings.php.


Angelina Belle

This should work fine.  What other mods do you have installed?
Never attribute to malice that which is adequately explained by stupidity. -- Hanlon's Razor

Illori

please dont open more then 1 topic on the same thing, 2 threads merged.

Norv

Quote from: rtil on September 25, 2011, 03:19:14 AM
i want to stress that my SMF installation was a conversion from IPB 2.2.0, and after doing so, nearly all the settings were wiped and i had to restore many of them manually.


I would do the following, to be sure: dump the settings table of a new 2.0/2.0.1 installation, into a file, and do the same with the settings table of your live forum. If you wish, you can compare them yourself, or you can PM me the dump of your live installation settings table, to take a quick look.
If that doesn't help, then we can try to take a look at permissions too (sounds unlikely though). Also, during attempted registration, does the page show any js errors or other errors in the browser console?
To-do lists are for deferral. The more things you write down the later they're done... until you have 100s of lists of things you don't do.

File a security report | Developers' Blog | Bug Tracker


Also known as Norv on D* | Norv N. on G+ | Norv on Github

rtil

Quote from: Norv on September 27, 2011, 03:19:40 AM
Quote from: rtil on September 25, 2011, 03:19:14 AM
i want to stress that my SMF installation was a conversion from IPB 2.2.0, and after doing so, nearly all the settings were wiped and i had to restore many of them manually.


I would do the following, to be sure: dump the settings table of a new 2.0/2.0.1 installation, into a file, and do the same with the settings table of your live forum. If you wish, you can compare them yourself, or you can PM me the dump of your live installation settings table, to take a quick look.
If that doesn't help, then we can try to take a look at permissions too (sounds unlikely though). Also, during attempted registration, does the page show any js errors or other errors in the browser console?
this is the most helpful answer i have received so far. thanks for the idea, i will try it later today and let you know of the results.

rtil

Quote from: Illori on September 26, 2011, 09:08:23 PM
please dont open more then 1 topic on the same thing, 2 threads merged.
only reason i did it is because i knew no one was ever going to reply to my first one which i had bumped several times. obviously i was right, because a new thread with 0 replies is more likely to get replied to.

rtil

Quote from: AngelinaBelle on September 26, 2011, 05:08:05 PM
This should work fine.  What other mods do you have installed?
i listed all the mods i have installed. why would i leave some out?

Angelina Belle

Sorry. Misunderstood. 
Norv is the expert. He can figure this out.
Never attribute to malice that which is adequately explained by stupidity. -- Hanlon's Razor

Advertisement: