Session verification failed. Please try logging out and back in again

[david101]

I using SMF 2.0.1 and while logging as Admin i am getting an error "Session verification failed. Please try logging out and back in again, and then try again." and i am not able to access the admin section. I cleared all the cookies and tried again but still showing the same error. I also tried internet explore but still not working. can anybody help in this regard.

[kat]

Could be a screwed cookie.

Try going to Admin>Server settings and renaming the cookie.

You'll be logged-out, of course. But, once you're back in, you could be lucky.

[david101]

I cleared all the cookies and I also tried through a different computer but still not able to access the admin. When I  tired to logging as admin and tried to click on admin option it throws an error "Session verification failed. Please try logging out and back in again, and then try again." I really cannot get a solution to it.

[kat]

Did you try what I suggested?

RENAME the cookie.

[orpheus82]

I'm having the exact same issue with the whole session verification. I don't mean to hijack thread, but it sounds like if one of us can fix this issue it will help all of us. I was finally able to get into the admin section after days of trying and I just changed the cookie name. I'm keeping my fingers crossed and I will report back after a few days.

The site we're running is www.82ndair.com [nofollow]

We've been having this issue ever since updating to 2.0.1

[orpheus82]

Changing the cookie name didn't help. I'm not the only one having this issue. Everyone else using our site is having problems with it, too.

[Sir Osis of Liver]

This becomes more interesting.  Would help to see your error log.  If you can't get into admin, use phpmyadmin to export smf_log_errors as pdf, and attach it here.

[orpheus82]

I'm getting a ton of password incorrect errors, which is odd since all of us are definitely entering our passwords correctly. The problem is we can't log out, not that we can't log in. This and the fact that most times we get the session verification error when trying to access the admin panel.

[orpheus82]

Here's part of the error log. Is it showing each user as a guest and then showing their name and the fact that the password is incorrect?

Guest
86.144.180.70   
    December 22, 2011, 11:32:58 AM
1cdc2ab3ddd9f1111e8737ddcfd884e2
Type of error: User
http://www.82ndair.com/index.php?action=login2Password [nofollow] incorrect - podge
    Guest
74.76.14.104   
    December 22, 2011, 07:20:08 AM
9b1246519650d838eaeff63a734c8ab0
Type of error: User
http://www.82ndair.com/index.php?action=login2Password [nofollow] incorrect - 82montypython
    Guest
74.76.14.104   
    December 22, 2011, 07:19:58 AM
d18fef11b884eef3da7bd0d135c1e543
Type of error: User
http://www.82ndair.com/index.php?action=login2Password [nofollow] incorrect - 82montypython
    Guest
74.76.14.104   
    December 22, 2011, 07:19:48 AM
94727dd1ab099d0e2791a6d6b167af6f
Type of error: User
http://www.82ndair.com/index.php?PHPSESSID=7KtBwZdsRRPEKxAJ,S5nf2&action=login2Password [nofollow] incorrect - 82montypython
    Guest
69.14.172.163   
    December 21, 2011, 09:58:41 PM
1adaef1bef1f00375096ba10e016c17c
Type of error: User
http://www.82ndair.com/index.php?PHPSESSID=X9821Ll,vWAAind6Oyw4A0&action=login2Password [nofollow] incorrect - [82nd]Hitokiri
    Guest
67.149.33.204   
    December 21, 2011, 07:44:46 PM
b651f7e91f5fee6f01981eb1f38d04af
Type of error: User
http://www.82ndair.com/index.php?action=login2Password [nofollow] incorrect - 82gijoe
    Guest
67.149.33.204   
    December 21, 2011, 07:44:38 PM
e137052240cd68df41fa3d14dfed32ac
Type of error: User
http://www.82ndair.com/index.php?action=login2Password [nofollow] incorrect - 82gijoe
    Guest
67.149.33.204   
    December 21, 2011, 07:44:14 PM
4b78347c860c32edba1bff168f5feafe
Type of error: User
http://www.82ndair.com/index.php?action=login2Password [nofollow] incorrect - 82gijoe
    Guest
67.149.33.204   
    December 21, 2011, 07:43:33 PM
c973e8e170f590e0869d5b5228eb8344
Type of error: User
http://www.82ndair.com/index.php?action=login2Password [nofollow] incorrect - 82gijoe
    Guest
205.222.248.92   
    December 21, 2011, 02:45:58 PM
beb0a2dd769afc399a738b6de89bb12d
Type of error: User
http://www.82ndair.com/index.php?action=login2Password [nofollow] incorrect - orpheus
    Guest
74.76.14.104   
    December 21, 2011, 07:19:10 AM
20084bc9d733fd2eb5441d6d30dd575f
Type of error: User
http://www.82ndair.com/index.php?action=login2Password [nofollow] incorrect - 82montypython
    Guest
74.76.14.104   
    December 21, 2011, 07:19:01 AM
0098c436ca4be16818e818108ac03544
Type of error: User
http://www.82ndair.com/index.php?action=login2Password [nofollow] incorrect - 82montypython
    Guest
74.76.14.104   
    December 21, 2011, 07:18:34 AM
7d5b4690741b439ccf5f80e9dfb6ca7b
Type of error: User
http://www.82ndair.com/index.php?action=login2Password [nofollow] incorrect - 82montypython
    Guest
74.76.14.104   
    December 21, 2011, 07:17:00 AM
a36ff33fa6742a3813801675f883f596
Type of error: User
http://www.82ndair.com/index.php?action=login2Password [nofollow] incorrect - 82montypython

[Sir Osis of Liver]

It's showing you the correct username (accepted), but passwords are being rejected.

Just registered - activate me.

[orpheus82]

Done!

Thanks for taking the time to check this out. It's been driving us nuts.

[Sir Osis of Liver]

Just took a quick look, now I have to toddle off into the realworld, but something is screwing the cookies. 

- It takes two attempts to login (not always), first one throws password error - that's what you're seeing in the error log.

- I can login once with FF, but can't logout - session verification error.

- In IE8, with cookies blocked and session cookies allowed, I can login/logout no problem.  If I accept cookies, I can login/logout once, then login a second time and can't logout - session verification error.  Have to clear cache/cookies to logout.

Won't get back to this until tomorrow.  Meanwhile, would be helpful if someone could try duplicating this problem and come up with an idea wtf is going on.

[orpheus82]

Thanks Krash!

That's exactly what's been happening to everyone trying to use the site. So strange.

[Skhilled]

This sounds like the hacking attempt from earlier this year resurfacing again. A few other people told me they had the same problems just recently. Around this time of year something always happens but it has been pretty quiet this year...so far.

[Sir Osis of Liver]

Orpheus, would help if I had temporary admin access so I can see the error log while I try different things.  Will have some time tonight to tinker with it.

[orpheus82]

Krash,

I'll set you up as admin as soon as I can get back into admin panel.

[orpheus82]

OK,

The site is playing nice now. I was able to grant you admin privileges.

[Sir Osis of Liver]

Ok, the 2.0.2 update hasn't changed anything - still seeing the same problem. 

A few things:

- The session verification error is not posted to the error log.

- When I try to clear cookies in FF (running default settings), I get two QuickTime errors ("failed to initialize") before cookies will clear.  Then I'm able to logout.

- The only thing I see that's loading from another server is the image for the gameservers link.  Don't know if it's significant, but the file has a header with several urls in it.


Couple things you can try:

- Comment out the gameservers links.

- Uninstall Aeva Media.

[orpheus82]

Thank you so much Krash. I'll do that as soon as I can get back into admin.

[orpheus82]

OK,

I removed the Aeva completely and took the gameservers link off. I'm still having the same issues.