Author |
Topic  |
|
steve shakeshaft
New Member

United Kingdom
61 Posts |
Posted - 21 August 2002 : 08:59:51
|
Hello all, I am running v3.3.04 as my "production forum", but I have v3.4 installed for testing purposes. They both use the same MySQL database. In 3.3.04 I can login OK using the admin user name and password. For some strange reason the admin password doesn't work in v3.4 !? The set up runs OK and the database tables all seem fine. Any help please? |
Regards
Steve.
steve@ukbeg.com |
Edited by - steve shakeshaft on 21 August 2002 09:33:25 |
|
RichardKinser
Snitz Forums Admin
    
USA
16655 Posts |
Posted - 21 August 2002 : 09:39:56
|
v3.3.04 and v3.4 cannot share the same database because of the password encryption in v3.4 |
 |
|
steve shakeshaft
New Member

United Kingdom
61 Posts |
Posted - 21 August 2002 : 09:54:53
|
I can't see a simple way to test it before upgrading? |
Regards
Steve.
steve@ukbeg.com |
 |
|
RichardKinser
Snitz Forums Admin
    
USA
16655 Posts |
Posted - 21 August 2002 : 10:15:28
|
you could use a copy of your existing db and do the upgrade on it. |
 |
|
Roland
Advanced Member
    
Netherlands
9335 Posts |
Posted - 21 August 2002 : 11:50:51
|
Richard, why aren't passwords encrypted when MySQL is used as the database? This is the second time someone posts something about this. |
 |
|
RichardKinser
Snitz Forums Admin
    
USA
16655 Posts |
Posted - 21 August 2002 : 11:54:20
|
what do you mean, not encrypted? He didn't update the database for 3.4, he is just trying to use the v3.4 files with the existing database. When trying to login via v3.4, it's encrypting the password he enters and then compares it with the password in the database, which is obviously not going to match. |
 |
|
Roland
Advanced Member
    
Netherlands
9335 Posts |
Posted - 21 August 2002 : 12:39:03
|
quote: Originally posted by RichardKinser
what do you mean, not encrypted? He didn't update the database for 3.4, he is just trying to use the v3.4 files with the existing database. When trying to login via v3.4, it's encrypting the password he enters and then compares it with the password in the database, which is obviously not going to match.
That's strange... if he didn't run setup.asp, then why did he say "The set up runs OK and the database tables all seem fine."
Also, this topic (http://forum.snitz.com/forum/topic.asp?TOPIC_ID=33149&SearchTerms=not,encrypted) has the same problem about no encryption of the passwords on MySQL. |
 |
|
Eugen
Starting Member
7 Posts |
Posted - 21 August 2002 : 12:45:40
|
PMFJI...
quote: They both use the same MySQL database. In 3.3.04 I can login OK using the admin user name and password.
That means the passwords can not be encrypted, otherwise 3.3.04 wouldn't run anymore. I'm not sure about the setup routine, but could it be that it checks only if the column is there, but does not alter it? Basically this has to be the case, otherwise it would be a point of no return during the setup.
I didn't upgrade to 3.4 and only use the program for 2 days now (call me newbie hehe), but if the setup would also include a migration, then indeed the passwords of all members have to be encrypted during the setup, but then the "old" version would no longer run...
|
 |
|
RichardKinser
Snitz Forums Admin
    
USA
16655 Posts |
Posted - 21 August 2002 : 12:47:38
|
did you see all of the errors that person got when trying to do the database update? None of the fields were updated that should have been. M_SHA256 was never added, so the encryption process didn't even run. |
 |
|
Roland
Advanced Member
    
Netherlands
9335 Posts |
Posted - 21 August 2002 : 12:48:06
|
okay, so it's not a problem in setup, but a permissions problem on the database. Sorry  |
Edited by - Roland on 21 August 2002 12:52:47 |
 |
|
steve shakeshaft
New Member

United Kingdom
61 Posts |
Posted - 22 August 2002 : 06:16:56
|
quote: Originally posted by RichardKinser
did you see all of the errors that person got when trying to do the database update? None of the fields were updated that should have been. M_SHA256 was never added, so the encryption process didn't even run.
An interesting thread this. Thank you. I don't recall seeing any errors when running the ../test_forum/setup.asp ? I'm not going to do it again though! I DO recall seeing a long list of fields that were added to the Database, so I believe I have a DB set up for 3.4 which my forum 3.3.04 is now using. Is that true? |
Regards
Steve.
steve@ukbeg.com |
 |
|
Roland
Advanced Member
    
Netherlands
9335 Posts |
Posted - 22 August 2002 : 12:36:12
|
If you, for example, never added the table FORUM_MEMBERS_PENDING by installing the Email Validation MOD, and do have it, it did write some things to the database. Officially all passwords should've been encrypted during setup so you shouldn't be able to use that database with your 3.3.x forum anymore (as nobody could log in).
Only running setup.asp again could give you a definitive answer and might fix the password problem, but as you said, you don't want to do that again  |
 |
|
steve shakeshaft
New Member

United Kingdom
61 Posts |
Posted - 23 August 2002 : 07:19:31
|
Thank you for that clarification. But I believe I didn't see a warning about "blowing up" my production forum by testing v3.4? Surely, I am not the only person wanting to test the new features before implementing the new code? I am cautious because of past experience with so called "improved code" ! |
Regards
Steve.
steve@ukbeg.com |
 |
|
Roland
Advanced Member
    
Netherlands
9335 Posts |
Posted - 23 August 2002 : 07:53:36
|
Well you won't blow up your production forum, but nobody should be able to post in it anymore after setup for 3.4 has been successfully completed due to the encrypted passwords in the database and lack of encryption on 3.3.x giving you a "password was incorrect" error.
I understand you wanting to test 3.4 first, but to my knowledge (which is limited when it comes to MSSQL and MySQL databases), with MSSQL and MySQL databases that can only be done by either renaming the table prefix or by using a second database. |
 |
|
steve shakeshaft
New Member

United Kingdom
61 Posts |
Posted - 23 August 2002 : 08:01:32
|
OK FrutZle, no more dumb questions from here. I shall take your advice and work on a second database. Thanks for your superb support. |
Regards
Steve.
steve@ukbeg.com |
 |
|
|
Topic  |
|