Category: User Administration (Registration, Login & Banning)

Request passcode to register: fails.

Example 1: (Still broken?) I toggled on "Request passcode to register:" and "Prevent automatic/robot registration:", as well as "user tracker" selected at registration time, and after the registration steps, and filling the user tracker information, I get the message (like): "Register code not valid. You need to know the register code to register in this web site" (approx)

Tried three times with different browsers and users names (and double checking the passcode to register): same effect.

When I toggle off the "Request passcode to register:", then everything works fine.

Example 2:
Request password to enter = on
User tracker (for registration) = on
...initial screen of choose name, enter password and email works.
...second screen with user tracker info fails on submit.

Tested with:
1. Passcode only - Success
2. Passcode & email verification - Success
3. Email verificaton & user tracker - Success
4. Passcode & user tracker - Fail

All I really need is Passcode & user tracker to work together!

I can't login to http://wiki-translation.com (using 1.10svn from june'08) with my openid account
http://xavidp.openid.es

I successfully used that openid account months ago to create a linked tiki account here (xavidp), but it seems that currently it doesn't work. Using the openid box I get the error:

"Authentication error; not a valid OpenID."

Maybe openid is broken? We are using kubrick theme there...

Ask for a new password on tikiwiki.org

You will see you have to click two links

1. to reset your password
2. to login with temp password (this link is missing http://)

"new user registration" has problems.
Problemss stated for TIKIWIKI 1.9.8.3 tried on newest PHP versions 5.2x (+newest MySAL)
- Fantastico install of 1.9.8.3 also concerned. -

It is either a config error by admin, or a problem of latest stable TIKIWIKI (Oct. 2007) with neweset versions of PHP, or something similar. Various tests + details are described - please visit the links below.

Hopeful to get opinions on this before going on with my tests.

If it is not a software bug, then it would at least probably be an aspect about the ergnomics of instructions. When this problem will be settled and if found of general interest, I will perhaps add the experience to the TIKIWIK docs.


Details are in the FORUM: Architecture/Installation :
http://tikiwiki.org/tiki-view_forum.php?topics_offset=1&topics_sort_mode=commentDate_desc&forumId=6

There the item:
"Register as a new user" does not excecute - config error? or bug in v.1.9.8.3 ?" :
http://tikiwiki.org/tiki-view_forum_thread.php?comments_parentId=27095&topics_offset=3&topics_sort_mode=lastPost_desc&forumId=6

Hi,

I think there is a usability bug when the option "Re-validate user by email after unsuccessful logins" is selected.
After x unsuccessful logins, the user gets an email with a link like :

http://www.mydomain.com/tiki/tiki-confirm_user_email.php?user=xxxxxxx&pass=yyyyyyyyyyyyyyyyyyyyyy

When following this link, the user gets the message: "This feature is disabled". Nothing is clear on what to do next, if one's account is still valid or not, and how to change one's password if forgotten.

Tikiwiki version used: 2.2
Options selected:
* Crypt password method: crypt-md5
* Validate users by emails: yes
* Registered Users can change password : yes
* Re-validate user by email after unsuccessful logins: 3

This is a new feature arrived in BRANCH-1-9

1. add feature_print and checks
2. add tiki_p_print and checks

---
The above problem-description makes no sense... please look at tw#74 for that
---
Problem rephrased:

The "Source" button is currently dependant on tiki_p_view_history - it should have a perm of its own.

We had just reconfigured the disk to RAID1 and backed up mysql, tiki, and php on our linux box.

Now, we are getting "Page cannot be displayed" after we edit the homepage and try to save it. It is happening on tiki-editpage.php but it is there. The permissions are 644 apache.

The second thing seen is the forums messages can't be accessed anymore.

Does anybody have experience with these problems? Any suggestions? Perhaps we should re-install all the software.

In /templates/modules/mod-login_box.tpl there are two (?) broken translations, tr in curly braces not closed & not opened, thus creating a HUGE text that gets pumped into tra, which contains mostly Tiki source code and of course lots and lots of line breaks and tabs...
{CODE(Colors="Tiki")}
{elseif $prefs.auth_method eq 'saml' && $showloginboxes neq 'y'}
<b><a class="linkmodule" href="tiki-login.php?auth=saml">{tr}
{if $prefs.saml_option_login_link_text eq ''}
Log in through SAML2 IdP
{else}
{$prefs.saml_option_login_link_text}
{/if}
{/tr}</a></b>
{if $prefs.saml_options_skip_admin eq 'y'}
<br /><a class="linkmodule" href="tiki-login_scr.php?user=admin">{tr}Log in as admin{/tr}</a>
{/if}
{else}
{CODE}
I set the importance to a higher value, because it is the user login that gets affected... Also, it affects ALL languages, including English...

Using 1.10cvs from August 1st, 2007.
On easyphp-1.8 environment (thus, Window$ XP)

Steps I did:
* updated cvs code
* called tiki-install.php to create a new clean install over an old tiki110cvs databse (assuming it deletes all tables and re-creates them as needed), using basic profile for easy use
* installation says eveything ok, no sql queries failed.
* login to new site as admin/admin
* change password to another string (simple string with only letters, between 6 and 8 chars. in all my attempts)
* after password is changed, error produced:
** I cannot login to the site. Using the right admin/pass., I see the homepage again as anonymous (so I'm not logged in).
** If using a wrong pass, I see the user/pass error message.

Tried reinstalling several times with different passwords, no success.
* the funny thing is that the new admin pass. seems to be recorded ok, since I can re-access the tiki-install.php using that new admin password.

Using 1.10cvs from mid june 2007

I'm using the "Admin > login > Use tracker for more user information"
Created a simple tracker, with some fields, including the "username" field, but not the email, right now, since that was already introduced in the first registration screen.

2 improvements would be needed/very welcome:

(1) Username was not assigned to the item in the user tracker, even if the user had selected a username in the previous screen (first registration screen - tiki-register.php).

(fyi: later on, When I, as a registered user, edited my item afterwards, the username info was well selected automatically).

(2)
This user info tracker (tracker id 1) had those fields:
^
~pp~
Id position name type options isMain Multilingual Tbl vis Searchable Public Hidden Mandatory Description
1 edit 10 Nom text field 1 y n y y y n y Nom de la... remove down
2 edit 20 Cognoms text field n n y y y n y Cognoms de... remove down
3 edit 30 Usuari user selector 1 y n y y y n y Nom... remove down
4 edit 40 Telèfon text field 1,50,,,50 n n n y y n n Telèfon/s... remove down
5 edit 50 Correu-e email 1 n n n y y n n Correu-e... remove down
6 edit 60 Barri / Població textarea 1,50,10,1000,1000 n n n y y n y Barri i... remove down
7 edit 100 Foto image 80,80,400,400,400 y n y n y n n Fotografia remove down
8 edit 200 Comentaris textarea 1,50,10,1000,1000 n n y n y n n La teva... remove down
~/pp~^

At "Admin > login > Displays UserTracker information in user information page. Format: trackerId, fieldId1, fieldId2, …:", these was the field content:

^
1,1,2,4,6,7,8
^

I also tried includind field 3 - the user selector - (i.e.: 1,1,2,3,4,6,7,8), but similar effect: I couldn't see the username shown in the second screen, and It was not set on the tracker (confirmed as admin user)

I would like a way to invite people to come to a Tiki site after I have added their login. (different of the use where people self-register)

Right now, I simulate a lost password message (which I customize).

Maybe this could become a new feature available to admins when

1- after a successful user creation at tiki-adminusers.php
2- when administering a user account
3- from : tiki-adminusers.php with the batch command to send to many new users.

The system would send an email with a one-click login and be sent to the user tracker
tiki-view_tracker_item.php?view=+user

Person who triggers this email alert should be in BCC. (to have a trace). Even better would be to have this logged somewhere but this could be for phase 2.

We could have a new mail template in templates/mail/welcome_message.tpl or in a wiki page (better!)


What do you think?

An attempt to log in using PAM (php-auth-pam) gives the following error message:

Notice: Undefined variable: error in /var/www/tikiwiki/tikiwiki-1.9.7/lib/userslib.php on line 554

Warning: Error variable must be passed by reference in /var/www/tikiwiki/tikiwiki-1.9.7/lib/userslib.php on line 554

Warning: Cannot modify header information - headers already sent by (output started at /var/www/tikiwiki/tikiwiki-1.9.7/lib/userslib.php:554) in /var/www/tikiwiki/tikiwiki-1.9.7/tiki-login.php on line 292


I'm using:
- php5-auth-pam-0.4-9.2 (Debian package)
- tikiwiki-1.9.7 (source)

Using 1.10cvs from mid june 2007.

Using 2.0 RC2 August 2008

Request passcode to register: fails.

__Example 1:__ (Still broken?) I toggled on "Request passcode to register:" and "Prevent automatic/robot registration:", as well as "user tracker" selected at registration time, and after the registration steps, and filling the user tracker information, I get the message (like): "Codi de registre no vàlid. Necessites saber el codi de registre per donar-te d'alta en aquest lloc web" (catalan)-> Register code not valid. You need to know the register code to register in this web site" (approx)

Tryied three times with different browsers and users names (and double cheking the passcode to register): same effect.

When I toggle off the "Request passcode to register:", then everything works fine.

__Example 2:__ (mlpvolt)
Request password to enter = on
User tracker (for registration) = on
...initial screen of choose name, enter password and email works.
...second screen with user tracker info fails on submit.

After I upgraded a site from 10.x to 12.x, and cleared caches, I got this error when attempting to see or login at the site:

12.x: Fatal error: Unsupported operand types in lib/setup/prefs.php on line 406

using 12.x svn (r53316)

The site uses LDAP, so maybe some pref in LDAP settings interferes somewhere?

our server uses PHP Version 5.3.5-1ubuntu7.2ppa1~lucid1

In a few sites we usually get spam registrations, polluting the user registration tracker, by humans (they type properly the passcode).

Every now and then I connect to the site to remove the users registrations (this removes also their user tracker items), and I would like to collect those ip's at the same time to be sent to the banning feature.

This type of feature already works nicely for comments: you can enable comment moderation, review many comments at once, select many through their checkboxes, and click at "ban and delete" type of option at the bottom.
This collects the ip's of those comments, and sends them for you to the banning feature, allowing you to ban all those ip's with just a few clicks.

We need this also for the fake registrations from human-spammers getting in.

Registration from within PluginTracker does not create a new user. (it has a field called "registration", which then shows the registration fields in the tracker form)

The same process from the registration script does work (user created, and item in user tracker created also).

Reproduced in the show instance:
u: admin
p: 12345

Add a new item through the Plugin Tracker, and the new user is not created, just the tracker item:
http://xavi-9794-5098.show.tikiwiki.org/tiki-index.php?page=Inscripcions&cookietab=2

Add a new user (and tracker item) through the registration form, and the user and tracker item are created successfully:
http://xavi-9794-5098.show.tikiwiki.org/tiki-register.php

Send email to let user validate account doesn't send email if user previously created.

Use case: a user register to a tiki site with a non-working email (defective address or server rejecting emails from that server to that email domain, etc).

Admin changes email for that user (after admin magically finds out in some cases what happened and what is another email for that user), and clicks at the checkbox:

"__Send an email to the user in order to allow him to validate his account__" (in tiki-adminusers.php?user=N)

Use doesn't get any email. Once the tiki site was configured to save mail info in tiki logs, you noticed that tiki logs didn't record any info of any email sent by that action.
You log out, and go as anon to: __tiki-remind_password.php__ to type the username and click at click at "__Request Password Reset__".
This does effectively send the email, so that it confirms that there is no problem with the server setup sending emails, but with tiki failing to send that email when "''Send an email to the user in order to allow him to validate his account''" was checkd, ~~red:__if the user already existed in the users list__~~.

When as admin you create a new user account and in the same action you select ''Send an email to the user in order to allow him to validate his account'', then the email is sent effectively.


To reprroduce:
# Go here: http://xavi-9794-5213.show.tikiwiki.org/tiki-adminusers.php?user=2
# login as
**u: admin
**p: 12345
# change that email for an email of your own, and tick at the checkbox: __Send an email to the user in order to allow him to validate his account__
# Check tiki logs (tiki-syslog.php), and you will see no record of the email expected to be sent
# Check you email account, and same, no email
# CReate a new account with an email of yours, while at the same time you tick at the box __Send an email to the user in order to allow him to validate his account__.
** You 'll see the record at the tiki logs tiki-syslog.php
** you'll receive the email with the link to validate your account

This should be migrated to the community site, and handled with ((doc:Organic groups)) and ((doc:User Trackers))

13.x: User Tracker can't be chosen in the interface to edit groups
Tried with Registered, following the instructions of the profile "User & Registration Tracker".

This profile instructions In 12.x still work like a charm, as usual. But in 13.x, there is no option to show the field to choose the "User tracker"

13.x: User Tracker can't be chosen in the interface to edit groups
Tried with Registered, following the instructions of the profile "User & Registration Tracker".

This profile instructions In 12.x still work like a charm, as usual. But in 13.x, there is no option to show the field to choose the "User tracker"

See it reproduced here:
http://xavi-9794-5307.show.tikiwiki.org/tiki-admingroups.php?group=Registered

u: admin
p: 12345

Assign user to groups has got a regression in 15.x: you cannot see (nor even edit) the group expiry date through the standard user administration UI in 15.x: when you click in "add or remove from a group" in 15.x, you are sent in a modal to this type of url:

__tiki-ajax_services.php?controller=user&action=manage_groups&checked=foo1&all_groups%5B0%5D=Admins&all_groups%5B1%5D=Anonymous&all_groups%5B2%5D=Group1&all_groups%5B3%5D=Group2&all_groups%5B4%5D=Registered&offset=0&sort_mode=login_asc&numrows=25&modal=1__

and no expiry information is shown.

While in Tiki12, you are sent to:
__tiki-assignuser.php?assign_user=foo1__
See it in action in Tiki12 here:
http://xavi-9794-5946.show.tikiwiki.org/tiki-assignuser.php?assign_user=foo1
u: admin
p: 12345


This will be added as a new bug report, since it's another issue (regression).

I tried to change the password of my user with admin perms, and I couldn't.
I was using this type of url:
tiki-adminusers.php?numrows=25&sort_mode=login_asc&user=2

This system error message was shown:

{CODE()}
System error.
El siguiente mensaje de error fue devuelto:

Unknown column 'password' in 'field list'
The query was:

update `users_users` set `hash`=? ,`password`=? ,`pass_confirm`=?, `provpass`=? where binary `login`=?
Values:

$1$U7wIlongstringhhere5utVMvA1
14numbershere85
UserName
The built query was likely:

update `users_users` set `hash`='$1$U7wIlongstringhhere5utVMvA1' ,`password`='' ,`pass_confirm`='14numbershere85', `provpass`='' where binary `login`='UserName'
Things to check:

Is your database up and running?

Is your database corrupt? Please see how to repair your database

Are your database credentials accurate? (username, database name, etc in db/local.php)

Did you complete the Tiki Installer?

Please see the documentation for more information.
{CODE}

When a new user registered with anti-bot and user tracker for more user information getting error message that registration code is invalid.

Here are steps to reproduce the problem.

1) Setup user information tracker with couple of fields.
2) Go to registration page
3) Enter registration details and click 'register'
4) This will take you to new screen where user tracker information needs to be filled.
5) Once you fill the user tracker information and click 'Save'
6) You will get error message that registration code is invalid

I have encountered a few snags after upgrading from Tiki 1.9.11 to 2.0

One of the problems is that I am unable to register / add users, because of the following error message:

An error occured in a database query!
Unknown column 'email_confirm' in 'field list'

This happens on
tiki-register.php (registration) and tiki-adminusers.php (batch upload / add)

Is there a fix for this?