Security Violation The action you attempted is not permitted Errors on single site from multi-site
wildmanmatt
Joined: 2008-07-10
Posts: 21 |
Posted: Fri, 2013-03-01 20:28 |
Hi, I am having a really odd issue - I manage a gallery2 multi-site installation comprised of 6 sites. One of the sites (the largest) has suddenly developed an issue with logging in. Whenever you try to use the login page it now brings up the error Security Violation The action you attempted is not permitted. However, it only does this on the single site, the other 5 are fine. It doesn't matter if you're a registered user or are just using random details you get the same error. I've checked with the users and they're adamant that they haven't done anything. I've tried searching, but none of the resolutions that I've found on the forum have managed to solve my problem. I am able to login using the manual method of putting the details into the address bar. Another issue that started at the same time is that the Advanced search on the site stopped working as well. Any thoughts would be much appreciated.
|
|
Posts: 8339
make sure the url is correct last line in config.php
-s
________________________________
All New jQuery Minislideshow for G2/G3
Posts: 21
Thank you for your reply. The last line in config.php is set to: $gallery->setConfig('baseUri', 'http://www.worldwildlifeimages.com/birds/main.php');
which appears correct to me?
Thanks,
Matt
Posts: 8339
try setting it to '' and let gallery figure out the uri.
Also run through the usual and clear the DB cache and check your DB for tables w/ too much overhead and crashed tables.
-s
________________________________
All New jQuery Minislideshow for G2/G3
Posts: 21
Hi,
I have set it to '' but that didn't solve the problem.
I have also deleted the DB cache (which I had to do manually because rmdir couldn't delete the directories because they weren't empty). I then ran mysqlcheck on the DB with the auto-repair option and everything came up okay except for 1 warning:
wwimages_birds.g2_SequenceEventLog
warning : 4 clients are using or haven't closed the table properly
status : OK
I also ran the maintenance task of optimising the database, but that didn't resolve the problem either
Posts: 21
Hi,
Are there any other things I can try to resolve this problem? Why would it suddenly happen when nothing else has changed?
Thanks,
Matt
Posts: 8339
Put gallery into debug mode and see if its generating any unscene errors.
FAQ: How to set/use Gallery in debug mode?
-s
________________________________
All New jQuery Minislideshow for G2/G3
Posts: 21
I have even tried reinstalling gallery2 with the minimal install, I've tried moving it to a local server and also to another commercial server, but it seems that whatever I try I still have the error of not being able to login without using the manual login... Here is the debug output when I try to login after a minimal install:
This is what I get when I go to the login page:
This is what I get once I've put in my username and password:
All of the other galleries that I have (and that I've not done any work with) just give Error pages when you visit them. This is the output of one of those on debug mode:
It looks like it's trying to find the captcha module, which is odd because I've disabled it in the admin...
Posts: 8339
first step would be to separate out the sites into individual G2 installs
http://galleryproject.org/node/111115#comment-402419
just do one first so we can confirm that the errors are localized.
next you may have to give me access.
-s
________________________________
All New jQuery Minislideshow for G2/G3
Posts: 21
The first 2 pastes are from the birds gallery which now is its own (I've already separated that one out).
Thanks,
Matt
Posts: 8339
does this file exist? does the webserver have permission to read it
-s
________________________________
All New jQuery Minislideshow for G2/G3
Posts: 21
I've reset the permissions and ownership on the modules directory and I now have the following debug output when I go to the login page:
And this when I login using my username and password:
Posts: 8339
lets deactivate the httpauth plugin
execute the following in phpMyAdmin or similar on the DB for this installation
-s
________________________________
All New jQuery Minislideshow for G2/G3
Posts: 21
I already have it deactivated - in PluginMap I have the following ones active:
core
debug
imagemagick
squarethumb
thumbnail
useralbum
Thanks,
Matt
Posts: 8339
did your anonymous user happen to get deleted userId = 5
-s
________________________________
All New jQuery Minislideshow for G2/G3
Posts: 21
in the g2_User table the first user has the following details:
g_id: 5
g_userName: guest
g_fullName: Guest
g_hashedPassword: E5_fc447780c8ffcebee194e1600a065fb5c
g_email: (null)
g_language: (null)
g_locked: 0
Posts: 8339
well, this is wasting my time. guessing and waiting for a reply.
Why haven't you given me access yet?
-s
________________________________
All New jQuery Minislideshow for G2/G3
Posts: 21
I sent you a PM with details
Posts: 8339
immediately I'm greeted by
this is the same error as above on a plugin that is not installed
plesk login creds don't work nor do the SFTP creds so I cannot check into anything.
-s
________________________________
All New jQuery Minislideshow for G2/G3