Admin_Auth and register_globals on issue

New Member Joined: Jun 10, 2005 Posts: 2

Hi guys, I've been lurking here for a couple hours a day for the last few days to try and get a clearer picture of what I want to do. I felt comfortable so I took the plunge. I'm running my own server (learning at the same time) with the 'PHP-Nuke 7.6 with Nuke Patched 3.0 already applied' from nukeresources.com. I also dl'd the 'NukeSentinel 71-77 230' from the same site. Only one addon - gallery v1.5.

I had a huge issue with getting Admin_Auth working. I kept getting the 'HTTPAuth Requires "register_globals" to be ON' error where the drop down box was supposed to appear. I tried the Only registered users can see links on this board! Get registered or login! but the error persisted. So I decided to do the CGI method and that must have taken me more than an hour to figure out (went quickly once I realized the 'crypt()' script was supposed to be a file viewed from the browser). So now I have Admin_Auth working and have no issues logging into my site whatsoever, but I still see that 'HTTPAuth Requires "register_globals" to be ON' glaring at me whenever I got the the Sentinel cp.

Like I said everything seems to work, but I hate leaving loose ends. Just the same I don't want to tinker with settings I have no experience with and really dork the site up. Any suggestions on fixing this or should I leave well enough alone?

-thx Verchiel

edit: wanted to add that my includes/nukesentinel.php didn't have the exact coding found in the link above. Close but not verbatim.

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

In admin/nukesendinel/ABMain.php you should have

Code:

if($apass > 0) {


  echo "<b>"._AB_SETPASSWORDS."</b>";


  echo "<input type='hidden' name='xhttp_auth' value='0'>";


} elseif(!ini_get("register_globals")) {


  echo "<b>"._AB_REGGLOBALS."</b>";


  echo "<input type='hidden' name='xhttp_auth' value='0'>";


} else {


  $sapi_name = strtolower(php_sapi_name());


  if($ip_sets['http_auth'] == 1) { $selauth2 = "selected"; } else if($ip_sets['http_auth'] == 2) { $selauth3 = "selected"; } else { $selauth1 = "selected"; }


  echo "<select name='xhttp_auth'>\n<option value='0' $selauth1>"._AB_OFF."</option>\n";


  if (strpos($sapi_name,"cgi")===FALSE) { echo "<option value='1' $selauth2>"._AB_HTTPAUTH."</option>\n"; }


  echo "<option value='2' $selauth3>"._AB_CGIAUTH."</option>\n</select>\n";


}

Try changing it to

Code:

if($apass > 0) {


  echo "<b>"._AB_SETPASSWORDS."</b>";


  echo "<input type='hidden' name='xhttp_auth' value='0'>";


} else {


  $sapi_name = strtolower(php_sapi_name());


  if($ip_sets['http_auth'] == 1) { $selauth2 = "selected"; } else if($ip_sets['http_auth'] == 2) { $selauth3 = "selected"; } else { $selauth1 = "selected"; }


  echo "<select name='xhttp_auth'>\n<option value='0' $selauth1>"._AB_OFF."</option>\n";


  if (strpos($sapi_name,"cgi")===FALSE) { echo "<option value='1' $selauth2>"._AB_HTTPAUTH."</option>\n"; }


  echo "<option value='2' $selauth3>"._AB_CGIAUTH."</option>\n</select>\n";


}

Posted: Fri Jun 10, 2005 6:15 pm

Thanks Raven, that worked perfectly. One more question - can I remove the includes/nukesentinel.php hack from above or should it remain?

-thx again Verchiel

Posted: Fri Jun 10, 2005 10:31 pm

You need to leave that too.