Forum Moderators: coopster

Message Too Old, No Replies

Weird script behavior

Same login, different results

         

rogerd

9:38 pm on Jun 24, 2003 (gmt 0)

WebmasterWorld Administrator 10+ Year Member



I recently saw what I thought was a nifty tool - sort of a project management/collaboration tool called phpCollab. In a nutshell, it lets you set up projects and users. Each project area features a mini-discussion forum, an area for uploads/downloads, a schedule page, etc. Each user can see only those projects to which he has rights. It's a nice little tool for small-scale web projects that might involve, say, a project manager, a few client staffers, a graphic designer, etc. The good news is that it's open source software, done in PHP/MySQL; the bad news is that the original developer has stopped supporting it. I figured it might be worth a try anyway, and that if we got it running it probably wouldn't break.

The folks that showed me this product on their site were well down the learning curve, so I had them install it on one of my sites. Here's where it gets weird... they could log in as administrator, and easily create and delete users. Using the exact same login info, however, I could log in with no problem but got errors on creating or deleting users. Some admin functions I seemed to be able to perform, but not those.

I realize this is an uncommon piece of software, but I'm curious if this symptom suggests any mode of failure to you PHP/MySQL experts. I don't see how logging in from my PC is different than the installer's PC (in a completely different location). I tried a couple of browsers, and the symptom was perfectly consistent - failure in creating/deleting. I've just about thrown in the towel on this experiment, but I thought I'd give it one last shot here. Any ideas? TIA...

dingman

10:46 pm on Jun 24, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I don't suppose there's anything in the system that limits access based on IPs or domain names? If so, perhaps the installer coppied and pasted some of the config info and forgot to change where you were allowed to connect from when they did it?

rogerd

11:19 pm on Jun 24, 2003 (gmt 0)

WebmasterWorld Administrator 10+ Year Member



I specifically raised that question and they assured me that there was no domain or IP checking going on. However, I should probably get in and look for myself, dingman. Good thought, and a bit of motivation to do it myself. :)

vincevincevince

11:27 pm on Jun 25, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



check the browser as well - there are a few differences in how they handle badly coded forms