Joomla! 1.0.13 embedding situation

endi

Joined: 2007-12-26
Posts: 2
Posted: Wed, 2007-12-26 22:30

So what exactly is the state of the art?

- Is 4theweb's bridge v2.0.14 compatible with Joomla! 1.0.13's seeded authentication?
- Is serblanc's mod (at http://www.e-poze.ro/downloads) the solution? Does it have any side effects? Does it, for instance, assume useralbums is installed? (because i see a mention to it in the code serblanc added to the bridge)

Thank you very much!

Andrea

Login or register to post comments
serbanc

Joined: 2006-05-19
Posts: 206
Posted: Thu, 2007-12-27 10:40

1. yes it is. however, due to new pasword encryption in J, you will not be able to log in to G standalone. to do that, you need to modify J's code.

2. I do not know. what is the problem ?
it does not assume useralbums installed. If you want to use that feature, you have to have useralbums installed.
Side effects: as of today, there are not known side effects.

serbanc - www.e-poze.ro

Login or register to post comments
erichorne

Joined: 2008-01-29
Posts: 8
Posted: Wed, 2008-01-30 14:09

I've looked and looked and looked to try and solve this J password incompatibility with G problem. All I have been able to find are answers like those above ("Yep, it doesn't work"). While that is informative and comforting, it is not entirely helpful.

Logging into Joomla first does seem to work around the issue; but that's not really the fix is it?
You can also use the "forgot password" link on G to change your standalone password back to something that you know. Tediousness aside, your password will get reverted the next time the users are sync'd.

Can anyone provide coding hints as to how to restore stand-alone G login? Changing J doesn't seem like the right thing to do. Changing G to use J's password checking seems like the correct fix; but the fact that no one has coded a solution makes me wonder if there is more to the problem (or if G integration with J is dying and no one really cares anymore).

I'm willing to dive in and try to address the problem; just need a little help getting started.

Thanks!

Login or register to post comments
serbanc

Joined: 2006-05-19
Posts: 206
Posted: Wed, 2008-01-30 18:40

the problem is like this:
when I took out J from my site, I also lost some files. The modified file was one of those files.
Not having J anymore, I cannot test.
If you agree to participate to test, I can try to code, then submit to you, bug-solving....

serbanc - www.e-poze.ro

Login or register to post comments
erichorne

Joined: 2008-01-29
Posts: 8
Posted: Thu, 2008-01-31 13:46

Let's do it.. Send me the files, I'll install them onto a play joomla box and we'll work from there.

Thanks!

-Eric

Login or register to post comments
serbanc

Joined: 2006-05-19
Posts: 206
Posted: Thu, 2008-01-31 17:40

ok, I am modifying the files and post here.
focus first on frontend login, then on admin login, then on registration.

serbanc - www.e-poze.ro

Login or register to post comments
serbanc

Joined: 2006-05-19
Posts: 206
Posted: Thu, 2008-01-31 21:04

so, a joomla.php modified to save passwords as md5 hash.
it is a joomla.php from a J1.0.14 !!!

feedback pls.

serbanc - www.e-poze.ro

AttachmentSize
joomla.php_.txt167.81 KB
Login or register to post comments
serbanc

Joined: 2006-05-19
Posts: 206
Posted: Sat, 2008-02-02 09:15

any feedback ?

serbanc - www.e-poze.ro

Login or register to post comments
AllanB

Joined: 2007-03-01
Posts: 37
Posted: Mon, 2008-02-25 15:31

So are you saying that the solution to the problem is to simply upgrade to J1.0.14? Or 1.0.15 now?

I am using G2 wrapped because of this problem.

Login or register to post comments
endi

Joined: 2007-12-26
Posts: 2
Posted: Mon, 2008-02-25 18:05

Wait - I'm not sure whether there is actually a problem... if you want to authenticate as a Joomla! user, use Gallery from inside the bridge only. I am currently running Gallery 2.2.4 on Joomla! 1.0.15 with the original bridge and I don't need to log myself directly into Gallery since Joomla! handles the authentication.

First I log myself into Joomla!, then I can also navigate to gallery2/main.php (unbridged Gallery) and there I find myself already logged in: probably the bridge sets the right cookie and everything works fine. I don't want site visitors to see Gallery unbridged and for myself, if I really need it, I know this workaround... so, nothing is broken...

Login or register to post comments
AllanB

Joined: 2007-03-01
Posts: 37
Posted: Tue, 2008-02-26 20:30

Anything I've read thus far says that if you use G2 bridged in Joomla 1.0.13, you won't then be able to use your password for your Gallery 2 standalone.

What is the situation?

Login or register to post comments
mw46

Joined: 2008-04-11
Posts: 1
Posted: Fri, 2008-04-11 23:32

OK, I just did a quick hack to get G 2.2.4 and J 1.0.15 (bridged) to work both. I wanted to user Gallery_Remote and that's suffering from the same problem.

In contrast to serbanc, I changed the G code to handle the J hashed password;-)

A little diff of my change;-)

--- ./modules/core/classes/GalleryUser.class.orig       2008-03-31 10:13:35.000000000 -0800
+++ ./modules/core/classes/GalleryUser.class    2008-04-11 16:16:54.000000000 -0700
@@ -171,6 +171,15 @@
      */
     function isCorrectPassword($password) {
        $valid = $this->getHashedPassword();
+        /* mw46 joomla integration */
+        if (strpos($valid, ':') > 0) {
+          list($hash, $salt) = explode(':', $valid);
+          $guess = md5($password.$salt);
+
+          return (!strcmp($guess, $hash));
+        }
+        /* end mw46 */
+
        $salt = substr($valid, 0, 4);
        /* Support both old (G1 thru 1.4.0; G2 thru alpha-4) and new password schemes: */
        $guess = (strlen($valid) == 32) ? md5($password) : ($salt . md5($salt . $password));

For me, the Remote_Gallery works again;-)

I know, this is probably not the best idea to change the core G code, a pluggable setup would probably be better. But I needed a working solution quickly.

Login or register to post comments