[Forum] 4.0.2 PL2 Password Reset Problem

[Gene Steinberg]

Since installing the latest security patch release, members who change their passwords cannot login. You try and you get the standard error message when entering a wrong username or password.

I have tried manually updating usernames and passwords with no result. They can't login.

I have no problems myself with my Admin account, and most of our members haven't reported any difficulties.

But I'm at a loss as to what to do here.

Anyone able to help?

Peace,
Gene

[Floris]

Can you go into your database and look at the user table and field salt, and see if length is set to 3 or 30 ?

Then open includes/class_dm_user.php and see at around line 18 if the define for salt is set 3 or 30 ?

Both those values should be 30.

If not, then re-upload the patch, and run the upgrade script.

Pro tip: Read the announcement, and backup your db&files

[Gene Steinberg]

I'm confused here. The User table lists all our users, over 2,400. The Salt table shows just random letters, not a number 3 or 30.

The file you mention lists a value of 30, however.

Am I looking at the wrong thing here in the database?

Peace,
Gene
Peace,
Gene

[Floris]

I'm confused here. The User table lists all our users, over 2,400. The Salt table shows just random letters, not a number 3 or 30.

The file you mention lists a value of 30, however.

Am I looking at the wrong thing here in the database?

Peace,
Gene
Peace,
Gene

I am not talking about the length of the user table, but the length of the salt field in the database table structure.

http://dl.dropbox.com/u/693961/patch...field-salt.png (version 3.8 example)

[aaraam]

I have same problem all our forum admingroup cannot login

[Gene Steinberg]

I tried that technique and changed the tables.

I then tested this with one of the usernames I reset.

No change.

[LouisB]

Had exactly the same problem. What i did to fix it was go into my PHPMyAdmin and change the salt field (user table) to 30. It's currently set to 3, which means you haven't upgraded using the file it said to use. So you now need to manually edit it. Then request a new password and it should all work.

[Gene Steinberg]

I upgraded with all the proper files.

I ran through the installer.

[LouisB]

Did you upgrade using the upgrade_402_salt.php file or upgrade.php?

Please try what i suggested, it's what fixed my issue. Do a backup of your database first to be on the safe side.

[Gene Steinberg]

Done yesterday morning. Can't recall the process. But does manually editing the table to change the length from 3 to 30 do the same?

[LouisB]

Yes change the salt values to 30. But also make sure you actually have the updated patch files on your server.

[Gene Steinberg]

That's been done, yes.

[uasuForos]

I have the same problem, updates to 4,02 pl4, like knowledge that archives are those that there are to update?

[GameFreak2009]

I got this problem too at vb4style.com, I'm a Super Moderator there and I can't login anymore since I've changed my password. I've recovered it and it also didn't work. :/

[darren1981]

Hey it's Darren from http://vb4style.com i am just backing up before running the salt script.. however the official documentation made mention that boards running PL2+ would not need to run the salt script... anyways i will run this after backing up...

Also ive noticed since updating to 4.0.2 PL4.. when replying to an existing topic or replying to a pm, that after clicking "post quick reply" or "send pm" that the page freezes on a blank white page.. the message still goes through but i either have to open up a new window / new tab... or reload the site through the current tab.. this was not happening before PL4.