phpBB-TweakS
 
Advanced Search
   
 
Home Downloads FAQ Register FAQ Memberlist Usergroups Ranks
 
 

Please help us to develop!

 
It appears you are using a browser that is not based on Internet Explorer, this means you are not viewing the web as good as you should be. Other browsers might try to immitate Internet Explorer, but none can parse the web as it should like Internet Explorer can. So view the web as it was meant to be with Avant Browser!
         

phpBB-TweakS Forum Index phpBB Security Die called twice, not suposed to happen...
Display posts from previous:   
Half Thread Topic  Fully Thread Topic  Download Topic
      All times are GMT - 5 Hours  
Post new topic  Reply to topic

Tue Mar 07, 2006 12:23 pm
Author Message
Cool stand Cool
Site Supporter
Site Supporter


Joined: 22 Feb 2006
Posts: 20
Words Posted: 2,227
Average Post: 111.35


Post subject: Die called twice, not suposed to happen... Reply with quote

A couple of my users are getting this message when they go to the forum:
message_die() was called multiple times. This isn't supposed to happen. Was message_die() used in page_tail.php?

Most of the users have no problem. Evidently they are simply going to the forum and have not yet logged in.

Anyway to isolate this or determine what is causing this? They are both using the same Board Style; subsilver.

One of the users is using AOL 9.0

Stan D.
Post #1
      Back To Top  

Tue Mar 07, 2006 7:19 pm
Author Message
Spinebuster
Support Team
Support Team


Joined: 21 Jan 2005
Posts: 413
Words Posted: 25,498
Average Post: 61.74


Post subject: Reply with quote

This happens when more than 1 sql query fails. There was a mod around that altered this error message to show you where the problem was. I will look around for it.
Post #2
      Back To Top  

Tue Mar 07, 2006 7:47 pm
Author Message
aUsTiN
Webmaster
Webmaster


Usa Georgia

Joined: 05 Jan 2005
Posts: 3684
Words Posted: 144,671
Average Post: 39.27

Location: USA

Post subject: Reply with quote

I dunno where the mod is, but there is a simple work around, kinda tired of posting it everywhere, so i added it to the tips forum.

http://www.phpbb-tweaks.com/viewtopic.php?p=17028#17028
Post #3
      Back To Top  

Tue Mar 07, 2006 10:18 pm
Author Message
Cool stand Cool
Site Supporter
Site Supporter


Joined: 22 Feb 2006
Posts: 20
Words Posted: 2,227
Average Post: 111.35


Post subject: Reply with quote

Thanks, once again.

Stan
Post #4
      Back To Top  

Thu Mar 09, 2006 5:03 pm
Author Message
Cool stand Cool
Site Supporter
Site Supporter


Joined: 22 Feb 2006
Posts: 20
Words Posted: 2,227
Average Post: 111.35


Post subject: Reply with quote

I added in the suggested code
"echo '<pre>'; print_r($msg_text); echo '</pre>';"
and it displays nothing. I can recreate it at will. It happens when the user logs in the first time after the security mod is applied. They get the message:

"Sorry, it appears this is your first visit since we added the security questions to accounts. You will only be able to view your profile until you update it and add a question and answer. Thanks!

Click here to goto your profile."

On clicking "here" going to the profile and updating the security question and answer and then clicking submit from the profile update;

The user is returned to the "sorry ..." and the message_die()... is under the text. The additional statement with the echo doesn't add any text so $msg_text must be empty or not global or something.

The message is only there for a couple of seconds and the user is returned to the forum signed in. Every thing has been updated correctly and the forum works. And in subsequent logins the user operates normally; i.e., no Sorry prompt.

So it's not causing a problem other than flashing up an error message, making the user think somethings wrong.

I can reproduce it by using phpMyAdmin to remove the security question/answer and logging in again.

I change the message to say, "OK - Updating profile" instead of the message_die..., I'll change it back sometime in the future.

Since I haven't located this problem here, I reinstalled v1.03 and re-entered all the mods to the existing phpBB2 files, but I get the same result.
I also have the atttachment (attach_mod_241) and the ip logging (cc_ip032) mods installed, but I don't see a conflict.

Regards,
Stan D.
Post #5
      Back To Top  

Thu Mar 09, 2006 5:13 pm
Author Message
aUsTiN
Webmaster
Webmaster


Usa Georgia

Joined: 05 Jan 2005
Posts: 3684
Words Posted: 144,671
Average Post: 39.27

Location: USA

Post subject: Reply with quote

You should not get the error message on the profile page.

Code:

#======================================================================= |
#==== Start: == phpBB Security ========================================= |
#==== v1.0.3 =========================================================== |
#====
   phpBBSecurity_FinalSet();
   phpBBSecurity_DBBackup();
      
   # Only allow them to login & view profile to update it
   if ($HTTP_SERVER_VARS['PHP_SELF'] == $board_config['script_path'] .'profile.'. $phpEx)
      $is_valid = TRUE;
   elseif ($HTTP_SERVER_VARS['PHP_SELF'] == $board_config['script_path'] .'login.'. $phpEx)
      $is_valid = TRUE;
   else
      $is_valid = '';
      
   if ( (!$is_valid) && (!$gen_simple_header) )
      {
      # Make sure they are not a guest
      if ($userdata['user_id'] != ANONYMOUS)
         {
         # Do the check
         if (!$userdata['phpBBSecurity_answer'] || !$userdata['phpBBSecurity_question'])
            phpBBSecurity_Force();
            
         if ($userdata['phpBBSecurity_force_pw_update'] != 1)
            message_die(GENERAL_ERROR, sprintf($lang['PS_pass_force'], '<a href="profile.'. $phpEx .'?mode=editprofile&infrom=phpBBSecurity&sid='. $userdata['session_id'] .'">', '</a>'));
         }
      }
#====
#==== Author: aUsTiN [austin@phpbb-amod.com] [http://phpbb-tweaks.com] = |
#==== End: ==== phpBB Security ========================================= |   
#======================================================================= |


That code snip from the install will prevent the sq check on profile. So my first guess is something is wrong there.
Post #6
      Back To Top  

Fri Mar 10, 2006 6:32 pm
Author Message
Spinebuster
Support Team
Support Team


Joined: 21 Jan 2005
Posts: 413
Words Posted: 25,498
Average Post: 61.74


Post subject: Reply with quote

I think this is what the problem is. I encountered the error on one of my test board. I tried the tip you posted and it only displayed one of the messages along with another message die error. So I installed the message die fix mod and this is what it displayed.

Quote:
Critical Error!
message_die() was called multiple times.

--------------------------------------------------------------------------------
Error #1
You have to update your password. Please press back & try again.


--------------------------------------------------------------------------------
Error #2
It appears this is your first visit since the admins have forced all users to change their passwords. So please click here and update your password. Thanks.
Post #7
      Back To Top  

Fri Mar 10, 2006 7:39 pm
Author Message
aUsTiN
Webmaster
Webmaster


Usa Georgia

Joined: 05 Jan 2005
Posts: 3684
Words Posted: 144,671
Average Post: 39.27

Location: USA

Post subject: Reply with quote

In that case, turn off the force users to update passwords in the ACP, Special section.
Post #8
      Back To Top  

Fri Mar 10, 2006 8:17 pm
Author Message
Cool stand Cool
Site Supporter
Site Supporter


Joined: 22 Feb 2006
Posts: 20
Words Posted: 2,227
Average Post: 111.35


Post subject: Reply with quote

By ACP do you refer to the phpBB2 Admin Panel? If so in the .:Security:. section under "Special" there is no option to force the user to update passwords on my system.
There is under the config though.
??? Stan
Post #9
      Back To Top  

Fri Mar 10, 2006 9:07 pm
Author Message
Spinebuster
Support Team
Support Team


Joined: 21 Jan 2005
Posts: 413
Words Posted: 25,498
Average Post: 61.74


Post subject: Reply with quote

Then that is where you need to change it.
Post #10
      Back To Top  

Sat Jun 24, 2006 9:56 pm
Author Message
Cool thewonderer Cool
Site Supporter
Site Supporter


Joined: 16 Jun 2006
Posts: 16
Words Posted: 9,253
Average Post: 578.31


Post subject: Reply with quote

I get the error after you click on the "Submit" key when adding the security question/answer. After you hit the submit button it takes you to the error page for a few seconds before it refreshes and takes you to the forums.

So how do I resolve this message_die error? There was so much said above I am totally confused Crying or Very sad
Post #11
      Back To Top  

 
         

Post new topic  Reply to topic

phpBB-TweakS Forum Index phpBB Security Die called twice, not suposed to happen...
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


      Back To Top  

Page 1 of 1
Jump to:  
 
Protected by phpBB Security © phpBB-TweakS
phpBB Security Has Blocked 3,237 Exploit Attempts.

· Archive · Sitemap: Index · Sitemap: Forums · Sitemap: Topics · Sitemap: Posts ·

:: [ Load Time: 2.9 Seconds ] :: [ 29 Queries ] :: [ 3,611 Page(s) Viewed Today ] ::
:: [ Todays Queries: 108,218 ] :: [ Highest Load: 1,396,429 Queries On May. 08, 2007 ] ::
:: [ SQL Load: 61% Time: 1.8 ] :: [ PHP Load: 39% Time: 1.1 ] :: [ Debug: On ] :: [ GZIP: Enabled ] ::
:: The server last rebooted 82 days, 2 hours, 25 minutes, 0 seconds ago. ::

The phpBB[Network]!
       
Powered by phpBB 2.0.* © 2001, 2002 phpBB Group
Avalanche style by What Is Real © 2004