Advertisement:

Author Topic: [1.1.11 update problem] Session verification failed. Please try logging out.....  (Read 10577 times)

Offline steve51184

  • Sr. Member
  • ****
  • Posts: 781
a few members of my site are getting this error and i've googled for an answer but nothing works...

Quote
An Error Has Occurred!
Session verification failed. Please try logging out and back in again, and then try again.

smf 1.1.11 + subdreamer 2.5.3.2 pro

my settings:



« Last Edit: December 05, 2009, 01:13:18 PM by ppbz »

Offline Kays

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 8,973
  • Gender: Male
    • Kayssplace
Re: Session verification failed. Please try logging out and back in again....
« Reply #1 on: December 05, 2009, 12:04:36 PM »
Hi, welcome to SMF. :)

Something to try is to go into the Admin CP, Server Settings > Feature Configuration and set the following:

Enable local storage of cookies - unchecked
Use database driven sessions - checked

If at first you don't succeed, use a bigger hammer. If that fails, read the manual.
My Mods

Offline steve51184

  • Sr. Member
  • ****
  • Posts: 781
Re: Session verification failed. Please try logging out and back in again....
« Reply #2 on: December 05, 2009, 12:08:57 PM »
thanks for the quick reply but i have that already (pic included in first post)

Offline Kays

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 8,973
  • Gender: Male
    • Kayssplace
Re: Session verification failed. Please try logging out and back in again....
« Reply #3 on: December 05, 2009, 12:16:53 PM »
Yah, but you had edited it while I was posting. :P

Normally that resolves login issues as such. Only other thought to check "Use subdomain independent cookies"

Is this happening with any particular browser?

If at first you don't succeed, use a bigger hammer. If that fails, read the manual.
My Mods

Offline steve51184

  • Sr. Member
  • ****
  • Posts: 781
Re: Session verification failed. Please try logging out and back in again....
« Reply #4 on: December 05, 2009, 12:23:28 PM »
Yah, but you had edited it while I was posting. :P

Normally that resolves login issues as such. Only other thought to check "Use subdomain independent cookies"

Is this happening with any particular browser?

i'll try that option... and no a few different browsers so far noting solid

Offline steve51184

  • Sr. Member
  • ****
  • Posts: 781
Re: Session verification failed. Please try logging out and back in again....
« Reply #5 on: December 05, 2009, 12:30:47 PM »
right the 'subdomain independent cookies' option didn't work

also it started doing this around the 1.1.11 update...

Offline Kays

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 8,973
  • Gender: Male
    • Kayssplace
Re: Session verification failed. Please try logging out and back in again....
« Reply #6 on: December 05, 2009, 12:40:43 PM »
I updated my forums yesterday and haven't noticed any problems or had any complaints. Yet..

You could try changing the cookie name. Sometimes it helps, but everyone will need to re-login then.

Quote
right the 'subdomain independent cookies' option didn't work

What do you mean by that? What happens?

Could you possibly set up a test account. Just a regular member acount to check the session issue.

If at first you don't succeed, use a bigger hammer. If that fails, read the manual.
My Mods

Offline steve51184

  • Sr. Member
  • ****
  • Posts: 781
Re: Session verification failed. Please try logging out and back in again....
« Reply #7 on: December 05, 2009, 12:45:10 PM »
I updated my forums yesterday and haven't noticed any problems or had any complaints. Yet..

You could try changing the cookie name. Sometimes it helps, but everyone will need to re-login then.

Quote
right the 'subdomain independent cookies' option didn't work

What do you mean by that? What happens?

Could you possibly set up a test account. Just a regular member acount to check the session issue.

according to my members ticking 'subdomain independent cookies' did nothing and there getting the same error

and i've tried to login to a test account (and even there's with there permission) but i can't reproduce the error

and yes i've tried to rename the cookie

Offline steve51184

  • Sr. Member
  • ****
  • Posts: 781
Re: Session verification failed. Please try logging out and back in again....
« Reply #8 on: December 05, 2009, 01:00:48 PM »
right i've found the error it was the latest update as i just uninstalled the 1.1.11 update taking me back to 1.1.10 and it's working fine for all members now so it's a problem within the update

i have of course installed the 1.1.11 update again for security reasons but i now know what's causing the problem... is there a fix?

Offline Kays

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 8,973
  • Gender: Male
    • Kayssplace
Re: Session verification failed. Please try logging out and back in again....
« Reply #9 on: December 05, 2009, 01:09:16 PM »
But why is it only happening to a few?

Quote
and i've tried to login to a test account (and even there's with there permission) but i can't reproduce the error

What I meant is so I can check it also. :)

However since it's not doing it for you. I'm wondering if it's happening with a particular browser.

Get them to clear their cache and cookies.

If at first you don't succeed, use a bigger hammer. If that fails, read the manual.
My Mods

Offline steve51184

  • Sr. Member
  • ****
  • Posts: 781
Re: Session verification failed. Please try logging out and back in again....
« Reply #10 on: December 05, 2009, 01:12:25 PM »
But why is it only happening to a few?

Quote
and i've tried to login to a test account (and even there's with there permission) but i can't reproduce the error

What I meant is so I can check it also. :)

However since it's not doing it for you. I'm wondering if it's happening with a particular browser.

Get them to clear their cache and cookies.

i've had people tell me google/firefox so it's not just one browser and i've had them clear there cache/cookies but that didn't work

anyway like my last post said the problem was fixed with removing the latest 1.1.11 update so the problem is with that

Offline Kays

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 8,973
  • Gender: Male
    • Kayssplace
If the problem is with the upgrade, it's not a common one. However if you feel that there is a problem feel free to file a bug report in the Bug Reports forum.

If you don't mind posting or PMing me a login for a test account so I can check it out.

Also, what mods do you have installed?

If at first you don't succeed, use a bigger hammer. If that fails, read the manual.
My Mods

Offline gbsothere

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 3,780
  • I'm a Pappy!
This may or may not help, but it was suggested in the original post of the "SMF 1.1.11 released" thread that if anyone encountered a Session Verification error, to refer to this thread:

http://www.simplemachines.org/community/index.php?topic=278824.msg1829348#msg1829348


(Of course, it's entirely possible that I'm misunderstanding the issue.)

 :)

My apologies, but I am taking a break from accepting PM requests for support.  If I am not currently assisting you, please do not ask as long as this notice is posted.  Thank you.
I Don't Want To Grow Old Alone

It has been proven that Steely Dan reduces the occurrence of road rage, according to an independent study.


A reminder about admin / ftp passwords etc.

Offline Kays

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 8,973
  • Gender: Male
    • Kayssplace
That link seems to be in regards to session verification errors when installing the upgrade.

The case here is not being able to stay logged in.

If at first you don't succeed, use a bigger hammer. If that fails, read the manual.
My Mods

Offline gbsothere

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 3,780
  • I'm a Pappy!
That link seems to be in regards to session verification errors when installing the upgrade.

The case here is not being able to stay logged in.



Ah, well there you go.  I began second-guessing myself, just after posting it.  I should have gone with my instincts and deleted.

Thanks, Kays.   :)
My apologies, but I am taking a break from accepting PM requests for support.  If I am not currently assisting you, please do not ask as long as this notice is posted.  Thank you.
I Don't Want To Grow Old Alone

It has been proven that Steely Dan reduces the occurrence of road rage, according to an independent study.


A reminder about admin / ftp passwords etc.

Offline Kays

  • SMF Friend
  • SMF Hero
  • *
  • Posts: 8,973
  • Gender: Male
    • Kayssplace
Not a problem. Any input or ideas are welcome. :)

If at first you don't succeed, use a bigger hammer. If that fails, read the manual.
My Mods

Offline Norv

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 18,313
  • Blue Wolf
Re: Session verification failed error after 1.1.11 update
« Reply #16 on: December 05, 2009, 06:25:58 PM »
Please consider using the Support topic you started, as the problem is not reported by anyone else and it seems very unlikely to be a bug. Rest assured that in case your support topic proves there is a bug in SMF related to this, it will be reconsidered.

Until that, I will merge this topic to the support topic, for the moment. Please can you still consider to provide a test account, normal member account, so we can test eventually with different browsers and see if we can replicate anything?

Please also tell a list of the mods you have installed.

Also, do you have .htaccess file(s) in your web directory or SMF directory?

Also, can you please copy paste the errors in your forum error log, here.
« Last Edit: December 05, 2009, 06:31:57 PM by Norv »
To-do lists are for deferral. The more things you write down the later they're done… until you have 100s of lists of things you don't do.
File a security report | Developers' Blog | Bug Tracker

Also known as Norv on D* | Norv N. on G+ | Norv on Github

Offline steve51184

  • Sr. Member
  • ****
  • Posts: 781
Re: Session verification failed error after 1.1.11 update
« Reply #17 on: December 05, 2009, 06:30:09 PM »
Please consider using the Support topic you started, as the problem is not reported by anyone else and it seems very unlikely to be a bug. Rest assured that in case your support topic proves there is a bug in SMF related to this, it will be reconsidered.

Until that, I will merge this topic to the support topic.

i was only doing what Kays suggested... anyway can i get some help on this please? :)

Offline Norv

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 18,313
  • Blue Wolf
Of course, I'm sorry, I didn't mean there is anything wrong with it. :)
I just think it needs more investigation, myself. Please see my previous post, I edited it, for further things we might find useful to verify, and please consider trying to answer them.
To-do lists are for deferral. The more things you write down the later they're done… until you have 100s of lists of things you don't do.
File a security report | Developers' Blog | Bug Tracker

Also known as Norv on D* | Norv N. on G+ | Norv on Github

Offline steve51184

  • Sr. Member
  • ****
  • Posts: 781
Re: Session verification failed error after 1.1.11 update
« Reply #19 on: December 05, 2009, 07:29:50 PM »
Please also tell a list of the mods you have installed.

i have MANY mods installed but 99% of them where installed manually so i don't have a list sorry

Also, do you have .htaccess file(s) in your web directory or SMF directory?

yes in my www root (not my smf root) http://paste2.org/p/549127

Also, can you please copy paste the errors in your forum error log, here.

i had the error log off but i'll turn it back on and post some when they come in :)

Offline steve51184

  • Sr. Member
  • ****
  • Posts: 781
anyone have any ideas?

Offline Norv

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 18,313
  • Blue Wolf
Could you please consider to uninstall pretty urls then try again?

Also, please try posting the errors in the error log.
To-do lists are for deferral. The more things you write down the later they're done… until you have 100s of lists of things you don't do.
File a security report | Developers' Blog | Bug Tracker

Also known as Norv on D* | Norv N. on G+ | Norv on Github

Offline steve51184

  • Sr. Member
  • ****
  • Posts: 781
Could you please consider to uninstall pretty urls then try again?

Also, please try posting the errors in the error log.

i don't have the 'pretty urls' mod installed and there's no errors in my error log

Offline Norv

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 18,313
  • Blue Wolf
Did you have any errors during update, like a "warning" that a test failed in one or more of your files? We still need to know how your files were modified, to try understanding how could they lead to this effect.
Also, please make sure you do ask people who have the problem to login, then check the error log.
Is there anything relating them? Are they many?

Also, please consider providing a test account, unless that is a problem for you, of course.
To-do lists are for deferral. The more things you write down the later they're done… until you have 100s of lists of things you don't do.
File a security report | Developers' Blog | Bug Tracker

Also known as Norv on D* | Norv N. on G+ | Norv on Github

Offline steve51184

  • Sr. Member
  • ****
  • Posts: 781
Did you have any errors during update, like a "warning" that a test failed in one or more of your files? We still need to know how your files were modified, to try understanding how could they lead to this effect.
Also, please make sure you do ask people who have the problem to login, then check the error log.
Is there anything relating them? Are they many?

Also, please consider providing a test account, unless that is a problem for you, of course.

no warning during the install and no errors at all as it all went fine

Offline terrycsa

  • Semi-Newbie
  • *
  • Posts: 11
I have been having the same problem with my forum both before and after updating. I haven't changed any mods or coding. It is happening with all members as well as admin.

The only thing I seem able to do is refresh after the error message, return to main forum, and refresh again. This seems to work. It isn't that you aren't being logged in, only that it is not showing as logged in until after I take the above steps.

It is frustrating more for my members. I just find it an inconvenience.  But would like to fix it.


Offline Norv

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 18,313
  • Blue Wolf
Please tell if and what errors are in the error log, when the users or yourself experience the issue.
When exactly does the message happen, at login, or anything else?
To-do lists are for deferral. The more things you write down the later they're done… until you have 100s of lists of things you don't do.
File a security report | Developers' Blog | Bug Tracker

Also known as Norv on D* | Norv N. on G+ | Norv on Github

Offline steve51184

  • Sr. Member
  • ****
  • Posts: 781
I have been having the same problem with my forum both before and after updating. I haven't changed any mods or coding. It is happening with all members as well as admin.

The only thing I seem able to do is refresh after the error message, return to main forum, and refresh again. This seems to work. It isn't that you aren't being logged in, only that it is not showing as logged in until after I take the above steps.

It is frustrating more for my members. I just find it an inconvenience.  But would like to fix it.

please don't hijack my thread.. make your own please ;)

Please tell if and what errors are in the error log, when the users or yourself experience the issue.
When exactly does the message happen, at login, or anything else?

there's nothing in the error log other then a few incorrect passwords etc

Offline Norv

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 18,313
  • Blue Wolf
When exactly does the problem happen? The URL in the address bar, of the page that says "session verification failed" could be very useful.
To-do lists are for deferral. The more things you write down the later they're done… until you have 100s of lists of things you don't do.
File a security report | Developers' Blog | Bug Tracker

Also known as Norv on D* | Norv N. on G+ | Norv on Github

Offline steve51184

  • Sr. Member
  • ****
  • Posts: 781
i'll post a few quotes from my members:

Quote
I get these errors, I tried logging in again and it comes back after like 10 secs. I tried, different browser, different computer at a different house. Not quite sure whats causing this, I get like one more error of this it says something else might post it.

Quote
hmm ..i had the same error too but that happened with google chorme beta version but than i changed to stable version and all set now ....

i'm asking them for the URL now won't be long

Offline steve51184

  • Sr. Member
  • ****
  • Posts: 781
right i got a reply about the URL and it's quite interesting

Code: [Select]
http://domain.com/forum/index.php?action=collapse;c=5;sa=collapse;#5
and he got this by going to http://domain.com/forum :-\
« Last Edit: December 06, 2009, 05:44:27 PM by ppbz »

Offline steve51184

  • Sr. Member
  • ****
  • Posts: 781
wait i think i know the problem... my members are clicking a link in my top menu that links to:

Code: [Select]
http://domain.com/forum/index.php?action=collapse;c=5;sa=collapse;#5
and that has no session ID in the url like this:

Code: [Select]
http://domain.com/forum/index.php?action=collapse;c=5;sa=expand;sesc=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx#5
this has never been a problem before but an update to smf 1.1.11 must of done something... ideas?

Offline Norv

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 18,313
  • Blue Wolf
That must definitely be it. The update to 1.1.11 has made among others, a series of tests of user's validity of sessions (for security reasons). But it should have (of course) added the right tokens to the links as well.
Is that link a SMF link as it seems? Is it from a custom theme? It looks to me like the link to expand/collapse categories.
To-do lists are for deferral. The more things you write down the later they're done… until you have 100s of lists of things you don't do.
File a security report | Developers' Blog | Bug Tracker

Also known as Norv on D* | Norv N. on G+ | Norv on Github

Offline steve51184

  • Sr. Member
  • ****
  • Posts: 781
That must definitely be it. The update to 1.1.11 has made among others, a series of tests of user's validity of sessions (for security reasons). But it should have (of course) added the right tokens to the links as well.
Is that link a SMF link as it seems? Is it from a custom theme? It looks to me like the link to expand/collapse categories.

it's not a link from smf it's one from a custom theme that links to one of my categories i say links to and not expand/collapse as i have that turned off and it's been on the site for years but JUST stopped working :\

also i notice that smf 2.x doesn't have this?

p.s. how do i now link to a board?

Offline Norv

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 18,313
  • Blue Wolf
That link is a link to expand/collapse categories. Apparently, it can be used to link to the category too, as the action to expand/collapse is forbidden on your forum, it just shows the category. I tested on my forum: it tries to expands/collapses categories. (and succeeds only if collapsing is enabled).

To link to a board: http://your_domain.com/index.php?board=1.0 (replace 1 with your board ID)
To link to a category, please try using instead: http://your_domain.com/index.php#c1 (replace 1 with your category ID). It should work if your forum is still set to show the all the categories and boards at http://your_domain.com/index.php.

If the link comes from a custom theme, you may want to report the problem to the theme author, because I suspect that themes creating their own link didn't have to include the token in links to the collapse action before 1.1.11, as you report, and have to do that now. Most of the themes should have no problem, because they probably use SMF's variable for this collapse action:
$context['categories'][$row_board['ID_CAT']['collapse_href']. Which already contains the necessary token, after 1.1.11.
Apparently your theme might have created the link itself, instead of using the above variable, or your variable value is not filled in BoardIndex.php. Posting the file where the link from the theme is (perhaps ./Themes/your_theme/BoardIndex.template.php) and the file where the variable to use for the link should be filled by SMF 1.1.11 (./Sources/BoardIndex.php), might help us see for sure which needs to be modified, to be working as it should.
To-do lists are for deferral. The more things you write down the later they're done… until you have 100s of lists of things you don't do.
File a security report | Developers' Blog | Bug Tracker

Also known as Norv on D* | Norv N. on G+ | Norv on Github

Offline steve51184

  • Sr. Member
  • ****
  • Posts: 781
That link is a link to expand/collapse categories. Apparently, it can be used to link to the category too, as the action to expand/collapse is forbidden on your forum, it just shows the category. I tested on my forum: it tries to expands/collapses categories. (and succeeds only if collapsing is enabled).

To link to a board: http://your_domain.com/index.php?board=1.0 (replace 1 with your board ID)
To link to a category, please try using instead: http://your_domain.com/index.php#c1 (replace 1 with your category ID). It should work if your forum is still set to show the all the categories and boards at http://your_domain.com/index.php.

the links the the categories works now (it's index.php#1 and not index.php#c1) and it should solve the problem but we'll see :)

thank you...

If the link comes from a custom theme, you may want to report the problem to the theme author, because I suspect that themes creating their own link didn't have to include the token in links to the collapse action before 1.1.11, as you report, and have to do that now. Most of the themes should have no problem, because they probably use SMF's variable for this collapse action:
$context['categories'][$row_board['ID_CAT']['collapse_href']. Which already contains the necessary token, after 1.1.11.
Apparently your theme might have created the link itself, instead of using the above variable, or your variable value is not filled in BoardIndex.php. Posting the file where the link from the theme is (perhaps ./Themes/your_theme/BoardIndex.template.php) and the file where the variable to use for the link should be filled by SMF 1.1.11 (./Sources/BoardIndex.php), might help us see for sure which needs to be modified, to be working as it should.

it's not a custom theme it's a theme/portal around smf from subdreamer cms :)

Offline Norv

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 18,313
  • Blue Wolf
If the link comes from a custom theme, you may want to report the problem to the theme author, because I suspect that themes creating their own link didn't have to include the token in links to the collapse action before 1.1.11, as you report, and have to do that now. Most of the themes should have no problem, because they probably use SMF's variable for this collapse action:
$context['categories'][$row_board['ID_CAT']['collapse_href']. Which already contains the necessary token, after 1.1.11.
Apparently your theme might have created the link itself, instead of using the above variable, or your variable value is not filled in BoardIndex.php. Posting the file where the link from the theme is (perhaps ./Themes/your_theme/BoardIndex.template.php) and the file where the variable to use for the link should be filled by SMF 1.1.11 (./Sources/BoardIndex.php), might help us see for sure which needs to be modified, to be working as it should.

it's not a custom theme it's a theme/portal around smf from subdreamer cms :)

Well, it's still custom. It might be helpful to them to notify them that that link doesn't work anymore after 1.1.11 and they need to add the session token to it now, (or use something else, like my example above), to be compatible with 1.1.11.
To-do lists are for deferral. The more things you write down the later they're done… until you have 100s of lists of things you don't do.
File a security report | Developers' Blog | Bug Tracker

Also known as Norv on D* | Norv N. on G+ | Norv on Github

Offline steve51184

  • Sr. Member
  • ****
  • Posts: 781
If the link comes from a custom theme, you may want to report the problem to the theme author, because I suspect that themes creating their own link didn't have to include the token in links to the collapse action before 1.1.11, as you report, and have to do that now. Most of the themes should have no problem, because they probably use SMF's variable for this collapse action:
$context['categories'][$row_board['ID_CAT']['collapse_href']. Which already contains the necessary token, after 1.1.11.
Apparently your theme might have created the link itself, instead of using the above variable, or your variable value is not filled in BoardIndex.php. Posting the file where the link from the theme is (perhaps ./Themes/your_theme/BoardIndex.template.php) and the file where the variable to use for the link should be filled by SMF 1.1.11 (./Sources/BoardIndex.php), might help us see for sure which needs to be modified, to be working as it should.

it's not a custom theme it's a theme/portal around smf from subdreamer cms :)

Well, it's still custom. It might be helpful to them to notify them that that link doesn't work anymore after 1.1.11 and they need to add the session token to it now, (or use something else, like my example above), to be compatible with 1.1.11.

it's a link i've added to the menu that was done before 1.1.11 so after the update it stopped working due to no token but i've fixed it now (if this was the problem to begin with)

Offline Norv

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 18,313
  • Blue Wolf
Great then, good to see the problem solved!
I am marking this topic as solved, but please feel free to reopen it in case you may need more assistance on this matter. :)
To-do lists are for deferral. The more things you write down the later they're done… until you have 100s of lists of things you don't do.
File a security report | Developers' Blog | Bug Tracker

Also known as Norv on D* | Norv N. on G+ | Norv on Github

Offline steve51184

  • Sr. Member
  • ****
  • Posts: 781
will do and thank you again