Cannot login to my forum

[mic_comte]

 Hello,
My old forum is still running on SMF 1.1.19, and since yesterday I cannot login anymore:
http://forum.braquedubourbonnais.info/index.php?language=french-utf8 [nofollow]

The failing part is here:

In LogInOut.php, this test condition is false:

      // Challenge passed.
      elseif ($_REQUEST['hash_passwrd'] == sha1($user_settings['passwd'] . $sc))
         $sha_passwd = $user_settings['passwd'];

The site is hosted on Godaddy.

Any idea?

[Dzonny]

Hello there.

Did you made any changes on forum, ie new mods added or anything?
Also can you tell us what is happening when you try to login, which error you're getting? Anything in error log?
Which php version you're on?

I assume that you're aware that 1.1.x branch is quite outdated and it's anyway highly suggested to upgrade to newer branch.

[mic_comte]

 Yes I am aware it is outdated, but for this low activity forum, I would like to keep it online at the lowest cost.

 The message I get is that the password is wrong.

 And indeed, I made an echo of $_REQUEST['hash_passwrd'], sha1($user_settings['passwd'] and $sc, the test is failling.

 The PHP version is this one:


PHP Version 5.4.19

[shadav]

you can try
https://wiki.simplemachines.org/smf/Administration_-_I_accidentally_lost_my_admin_account!_What_can_I_do
at the bottom of the page
Resetting the Password of an Admin User

Yes I am aware it is outdated, but for this low activity forum, I would like to keep it online at the lowest cost.

sorry but I don't understand this statement, smf is free
staying on an outdated version leaves your site open to known security issues and possibly hacking

PHP Version 5.4.19

this surprises me as most hosts are ditching php 5.x or anything under 7.2

[Sir Osis of Liver]

GoDaddy has some really old servers that haven't been updated in years, not unusual to see a 1.1 forum running on one of these clunkers.

[mic_comte]

Yes I am aware it is outdated, but for this low activity forum, I would like to keep it online at the lowest cost.

I am not speaking of money but of time.

[mic_comte]

you can try
https://wiki.simplemachines.org/smf/Administration_-_I_accidentally_lost_my_admin_account!_What_can_I_do
at the bottom of the page
Resetting the Password of an Admin User

 I don't think it is the problem, none of the passwords work since yesterday.

[shadav]

if no one's passwords are working, sounds more like you were hacked
have you noticed any suspicious files on your site(s)?

check your server logs

sorry but the only real advice I can give is to
1) make sure there aren't any rogue files or codes in any files on your site
2) check your server logs
3) update to the latest stable version of smf, currently 2.0.18
4) reset yours and everyone's passwords
6) make sure there's not a rogue admin account that a hacker might have created
7) have everyone change their passwords
8 ) move away from godaddy as they are known for having all sorts of issues

[Kindred]

potentially, since this is GODaddy, they might have changed something on the server (mySQL version or settings) which causes your system to fail.

You need to
1- leave goDaddy
2- Upgrade to 2.0.18

It's not a matter of cost (even time) -- are you willing to leave your system WITH KNOWN SECURITY HOLES? (Holes that have since been patched in the 2.0 releases)

A 30 minute update can save you a world of hurt.

[mic_comte]

 30 minutes to change provider and upgrade to 2.0.18? You are optimistic...

 Where do you htink I should go instead of Godaddy?

[shadav]

30 minutes to change provider and upgrade to 2.0.18? You are optimistic...

 Where do you htink I should go instead of Godaddy?

not really, log into your hosting account get a full backup (files and database)

signup for a new host, create database, install backups (or ask new host to migrate your site for you, this might take some time yes)

download and run repair_settings tool to point all urls and paths to new server: https://wiki.simplemachines.org/smf/Repair_settings.php/en

download the 2.0.18 Large upgrade: https://download.simplemachines.org/ install files over existing smf files (except for settings.php), run the update, boom you're done
(in all honesty you may not even need your old files other than the settings.php, but I could be wrong there)

as for hosting, that would depend on what all you are looking for
I suggest either https://www.icdsoft.com/ or https://www.a2hosting.com/

you can also check through the threads in the Hosts, Hosting and Commercial Services boards and their sub boards

stay away from godaddy and hostgator
they've had too many issues over the years

basically don't use any hosts listed here
https://researchasahobby.com/full-list-eig-hosting-companies-brands/

[edit]
then again considering you're on smf 1.x it would probably be better to update first because as stated most hosts have done away with php 5.x
so update first then grab a full backup of your files and database from hosting account then move it to the new host, then run the repair settings tool
and now you are on a stable release of smf, on a better host, and on the latest stable php version (7.4)

[mic_comte]

 Hi,
I will try to setup a new SMF2.1 and import my database first and see if it works.

I will loose the customisations I did, but it is not a big deal.

Because I have a whole site with the forum, with hundreds of subdomains, etc... it is not so easy to move.

Thanks for your help.

Best regards
Michael

[Sir Osis of Liver]

Crocweb support will migrate your GoDaddy account using cpanel backup, directory structure will be exactly the same.  You'll have access to the new install using direct server links so you can check everything and make any necessary adjustments before updating nameservers and going live.  Your forum and any other sites you have will continue running on GD until you do dns update.

[mic_comte]

Ok, thanks.

Now one thing, I made a new installation with smf_2-0-18_install.zip and imported my old 1.1 database.

http://www.braquedubourbonnais.info/forum2/install.php [nofollow]

Should I download the upgrade.php and execute it to make necessary changes to my database?

[Doug Heffernan]

Ok, thanks.

Now one thing, I made a new installation with smf_2-0-18_install.zip and imported my old 1.1 database.

http://www.braquedubourbonnais.info/forum2/install.php

Should I download the upgrade.php and execute it to make necessary changes to my database?

Yes, you should run the upgrade to upate the database to 2.0.18. Is that the url of your live forum btw or a test forum that you installed to do a dry run of the upgrade?

[mic_comte]

 This is a test but will become the next forum once it works:
http://www.braquedubourbonnais.info/forum2/install.php [nofollow]

 The original forum is here:
http://forum.braquedubourbonnais.info/index.php?language=english [nofollow]

 So, I will upload the upgrade.php here and run it first: http://www.braquedubourbonnais.info/forum2 [nofollow]

[Doug Heffernan]

This is a test but will become the next forum once it works:
http://www.braquedubourbonnais.info/forum2/install.php

 The original forum is here:
http://forum.braquedubourbonnais.info/index.php?language=english

 So, I will upload the upgrade.php here and run it first: http://www.braquedubourbonnais.info/forum2

Another thing that you must do after the forum is upgraded, is to run the repair_settings.php tool to straighten out the paths and url as they will point to the original forum.

Good luck with the upgrade and keep us posted.

[mic_comte]

 I have uploaded upgrade.php and all the sql files (upgrade_1-0.sql, etc...)

But now when I try to execute http://www.braquedubourbonnais.info/forum2/upgrade.php [nofollow]

I am directly rerouted to http://www.braquedubourbonnais.info/forum2/install.php [nofollow]

[mic_comte]

 The files I have in forum2 are extracted from smf_2-0-18_install.zip

Should I replace them with those from smf_2-0-18_upgrade.zip? (except Setting.php of course)

[Kindred]

They are the same files, except for the sql....  delete the ihstall.php