Ravens PHP Scripts: Forums
 

 

View next topic
View previous topic
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> v2.30.01 RN Security Issues
Author Message
mrix
Client



Joined: Dec 04, 2004
Posts: 757

PostPosted: Fri Jun 26, 2009 7:39 am Reply with quote

Hi all, I have helped a friend of mine set up a ravennuke site and was in the process of adding the details for the nuke sentinal login and find I cant login. the error in the pop up box i get is this...

Warning: This server is requesting that your username and password be sent in an insecure manner(basic authentication without a secure connection)

any idea`s ?
cheers all
mrix
 
View user's profile Send private message Visit poster's website
kguske
Site Admin



Joined: Jun 04, 2004
Posts: 6432

PostPosted: Fri Jun 26, 2009 10:53 am Reply with quote

Sounds like a browser security setting.

_________________
I search, therefore I exist...
nukeSEO - nukeFEED - nukePIE - nukeSPAM - nukeWYSIWYG
 
View user's profile Send private message
mrix







PostPosted: Fri Jun 26, 2009 10:58 am Reply with quote

Hi there I have 2 other phpnuke sites where are can login fine no problems.
cheers
mrix
 
kguske







PostPosted: Fri Jun 26, 2009 11:46 am Reply with quote

Do any of the sites use SSL and redirect to HTTPS?
 
kguske







PostPosted: Fri Jun 26, 2009 11:48 am Reply with quote

And, are the other sites in an approved sites list in your browser?
 
mrix







PostPosted: Fri Jun 26, 2009 11:53 am Reply with quote

No none of the site are approved in the browser and no domains are on ssl certificate.
thanks for the help
mrix
 
kguske







PostPosted: Fri Jun 26, 2009 12:01 pm Reply with quote

Then I am stumped. I would need to see screen shots or get URLs from the sites to reproduce it.
 
mrix







PostPosted: Fri Jun 26, 2009 12:05 pm Reply with quote

Hi there the site is here [ Only registered users can see links on this board! Get registered or login! ]
cheers
mrix
 
kguske







PostPosted: Fri Jun 26, 2009 1:17 pm Reply with quote

I was able to get the admin authentication popup correctly on this site. Is that your issue, or is it the admin login page where you see this error?
 
Guardian2003
Site Admin



Joined: Aug 28, 2003
Posts: 6799
Location: Ha Noi, Viet Nam

PostPosted: Fri Jun 26, 2009 2:41 pm Reply with quote

I also got to the HTTPAuth NS log-in pop up.
I might be completely off base, so take this just as an FYI but the last time I saw something like you describe was using FF browser to access a site hosted on a VPS where the shared SSL had expired, even though the site itself was not using the SSL or using HTTPS
 
View user's profile Send private message Send e-mail
mrix







PostPosted: Fri Jun 26, 2009 3:36 pm Reply with quote

Quote:
I was able to get the admin authentication popup correctly on this site. Is that your issue, or is it the admin login page where you see this error?


Yes the sentinal box pops up but if you look at the box it shows the error.

Quote:
describe was using FF browser

If you mean Fire Fox, no i have never used it

thanks for the help I am at a loss Sad


cheers
mrix
 
Guardian2003







PostPosted: Fri Jun 26, 2009 3:44 pm Reply with quote

I don't see any error at all on the pop-up, only the message
Quote:
A username and password are being requested by [ Only registered users can see links on this board! Get registered or login! ] The site says: "Restricted by NukeSentinel(tm)"
 
mrix







PostPosted: Fri Jun 26, 2009 3:50 pm Reply with quote

Quote:
A username and password are being requested by [ Only registered users can see links on this board! Get registered or login! ] The site says: "Restricted by NukeSentinel(tm)"


That is interesting as I see this..

Image

I guess if others see what you see it must be my end only Confused

thanks
mrix
 
mrix







PostPosted: Fri Jun 26, 2009 4:02 pm Reply with quote

I have asked a friend to login and he cant and I have tried a different pc with a different operating system and still no joy Sad
cheers
mrix
 
Susann
Moderator



Joined: Dec 19, 2004
Posts: 3191
Location: Germany:Moderator German NukeSentinel Support

PostPosted: Fri Jun 26, 2009 4:57 pm Reply with quote

I ve tried it with IE and FF and don´t get this.I´m quite sure I can login without issue.Check our Browser/Windows settings.
 
View user's profile Send private message
nuken
RavenNuke(tm) Development Team



Joined: Mar 11, 2007
Posts: 2024
Location: North Carolina

PostPosted: Fri Jun 26, 2009 5:04 pm Reply with quote

What are you trying to log into? It appears you are already logged in as admin, the admin menu is to the left.

_________________
Tricked Out News 
View user's profile Send private message Send e-mail Visit poster's website
Raven
Site Admin/Owner



Joined: Aug 27, 2002
Posts: 17088

PostPosted: Fri Jun 26, 2009 5:43 pm Reply with quote

That is all standard stuff. Just ignore it. Basic HTTP Auth is sent as clear text and always has been. Your browser, because of windows browser security settings (somewhere) is just making you aware in the event you were expecting an ssl connection. Digest Auth, on the other hand, will encode your info but it is not universally supported and isn't even in PHP4 if I remember correctly.
 
View user's profile Send private message
mrix







PostPosted: Sat Jun 27, 2009 3:01 am Reply with quote

Hi so if this is the norm I guess I just have a sentinal login issue. I have looked at the admin password for sentinal and checked out the .staccess file and it shows the encripted password there.
Just wondering what I have missed Confused Sad everything appears to be fine but cant think what I may of missed.?
Is there an admin here who would would be kind enough to have a quick look if i give then the login details as I am at a total loss?
cheers
mrix
 
Susann







PostPosted: Sat Jun 27, 2009 5:28 am Reply with quote

I can do a quick check.
 
mrix







PostPosted: Sat Jun 27, 2009 6:18 am Reply with quote

Very kind of you Susan Very Happy I have sent the details through pm.
I have renamed the .htaccess and switch off admin auth so you can login ok.
thanks
mrix
 
Susann







PostPosted: Sat Jun 27, 2009 8:57 am Reply with quote

Everything should work now. Please try it again.
 
mrix







PostPosted: Sat Jun 27, 2009 9:23 am Reply with quote

Hi I go to login again using the details I give you but my end the pop up box just appears again asking for the login details Crying or Very sad
really appreciate the help though
mrix
 
Susann







PostPosted: Sat Jun 27, 2009 10:20 am Reply with quote

It works perfect every time I login. So I don´t know what to tell you.Try clear your cookies and cache.
 
mrix







PostPosted: Sat Jun 27, 2009 12:27 pm Reply with quote

Yes all working at last Very Happy
many thanks Susan for all the help and time, very much apreciated.
thanks
mrix
 
Susann







PostPosted: Sat Jun 27, 2009 1:10 pm Reply with quote

You're welcome! Smile
 
Display posts from previous:       
Post new topic   Reply to topic    Ravens PHP Scripts And Web Hosting Forum Index -> v2.30.01 RN Security Issues

View next topic
View previous topic
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001-2007 phpBB Group
All times are GMT - 6 Hours
 
Forums ©