v1.9.5.5 RTW (Date 3/4/2011 Rev 4742)· Page 2

Welcome Guest! To enable all features please Login or Register

tommy382
100% (Exalted)
YAF Commander

13 years ago

Permission for what user? The "users" account already have FULL permission - I made it full to be safe.

Update: I even allow "everyone" account FULL permission, doesn't help. The [assembly:] attribute in the link you gave apply on which file?

Edited by user 13 years ago | Reason: Not specified

tommy382
100% (Exalted)
YAF Commander

13 years ago

#17

I found a fix for this security issue. For some reason, if I use .NET 4.0 to power the forum, it works. If I use .NET 3.5sp1 to power the forum, the security error pop-up 99% of the times - 1% it works normally even when the application pool is .NET 2.0 (v3.5sp1 installed but referenced as ".NET 2.0" in IIS7).

I checked every projects in the YAF solution and they all have target set to .NET 3.5, not 4.0. This is weird but I don't mind running using .NET 4.0. Any known issue w/ the forum running with .NET 4.0? I have been running w/ 3.5 until now.

midwestSS
100% (Exalted)
YAF MVP

13 years ago

#18

im finding an issue after i upgraded my site, that when you click the login button, its putting a # in the url

such as silveradoss.net/# this is causing the logon box to pop up.. then go away before you can type in it...

squirrel
100% (Exalted)
YAF Leader

13 years ago

#19

Originally Posted by: tommy382

Your issue is related to a TRUST setting. I've run in to this before both on my development server and on a Plesk based IIS 6 server. Granting the application Full Trust resolved it on my end.

If you can't find it using the forum search, try my signature link -- searches this site using Google: Google is my Friend

Jaben
100% (Exalted)
YAF Developer Topic Starter

13 years ago

#20

Permission for what user? The "users" account already have FULL permission - I made it full to be safe.

Update: I even allow "everyone" account FULL permission, doesn't help. The [assembly:] attribute in the link you gave apply on which file?

Originally Posted by: tommy382

I tried with .NET v3.5 and I still couldn't reproduce the issue. Is anyone else having this problem?

squirrel
100% (Exalted)
YAF Leader

13 years ago

#21

Permission for what user? The "users" account already have FULL permission - I made it full to be safe.

Update: I even allow "everyone" account FULL permission, doesn't help. The [assembly:] attribute in the link you gave apply on which file?

Originally Posted by: Jaben

I tried with .NET v3.5 and I still couldn't reproduce the issue. Is anyone else having this problem?

Originally Posted by: tommy382

It's a rarity that it occurred to me -- but it did happen right after AutoFac appeared in the SVN that I hit it. When I search the error in general most .NET users have had the issue when accessing files that don't have sufficient permissions in the directory tree (not related to YAF or AutoFac so to speak, either).

If you can't find it using the forum search, try my signature link -- searches this site using Google: Google is my Friend

midwestSS
100% (Exalted)
YAF MVP

13 years ago

#22

Is there something different in this RTW in regards to timing at the login?

what i mean is, ive got this in a dev environment, looking at a backup of my production database. as i usually do.

while im having login issues (web.config.. i know).. im seeing that i try to login.. just goes back to the main screen, not logged in.. i try to login again, the logon box comes up.. and disappears quickly, going back to the main forum screen.. however if i wait a minute or two, and then try to login, the login box stays, i can put in my username\pw and of course due to web.config, its going back to the main screen, not logged in..

so.. do you know why i have to wait to re try the login?

squirrel
100% (Exalted)
YAF Leader

13 years ago

#23

Is there something different in this RTW in regards to timing at the login?

what i mean is, ive got this in a dev environment, looking at a backup of my production database. as i usually do.

so.. do you know why i have to wait to re try the login?

Originally Posted by: midwestSS

Try turning off the Modal Login boxes in your config. We had an issue with them a while back in the SVN phase.

If you can't find it using the forum search, try my signature link -- searches this site using Google: Google is my Friend

midwestSS
100% (Exalted)
YAF MVP

13 years ago

#24

can you point me in the right direction for that?

tommy382
100% (Exalted)
YAF Commander

13 years ago

#25

Found another issue: clicking on admin\users and roles\roles ran into this error (line 108):

Index was outside the bounds of the array.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.IndexOutOfRangeException: Index was outside the bounds of the array.

Source Error:

Line 106:                bool isLast = false;
Line 107:              
Line 108:                foreach (string row in styles)
Line 109:                {
Line 110:                    {


Source File: D:\!Sites\Yaf1955RTW\YAF.Controls\UserStyles.cs    Line: 108

Stack Trace:

[IndexOutOfRangeException: Index was outside the bounds of the array.]
   YAF.Controls.RoleRankStyles.Render(HtmlTextWriter writer) in D:\!Sites\Yaf1955RTW\YAF.Controls\UserStyles.cs:108
   System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) +246
   System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) +246
   System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) +246
   YAF.Controls.AdminMenu.Render(HtmlTextWriter writer) in D:\!Sites\Yaf1955RTW\YAF.Controls\YafAdminMenu\AdminMenu.cs:225
   System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) +246
   YAF.Core.ForumPage.Render(HtmlTextWriter writer) in D:\!Sites\Yaf1955RTW\YAF.Core\BasePages\ForumPage.cs:561
   System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) +246
   YAF.Forum.Render(HtmlTextWriter writer) +338
   System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) +246
   System.Web.UI.HtmlControls.HtmlForm.RenderChildren(HtmlTextWriter writer) +315
   System.Web.UI.HtmlControls.HtmlContainerControl.Render(HtmlTextWriter writer) +48
   System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) +246
   System.Web.UI.Page.Render(HtmlTextWriter writer) +40
   System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +5274

squirrel
100% (Exalted)
YAF Leader

13 years ago

#26

can you point me in the right direction for that?

Originally Posted by: midwestSS

It's unfortunately in the host settings, which if you can't login, you can't get to. I'll look up where it's stored in the database and get you an SQL hack for it you can run.

If you can't find it using the forum search, try my signature link -- searches this site using Google: Google is my Friend

squirrel
100% (Exalted)
YAF Leader

13 years ago

#27

can you point me in the right direction for that?

Originally Posted by: squirrel

It's unfortunately in the host settings, which if you can't login, you can't get to. I'll look up where it's stored in the database and get you an SQL hack for it you can run.

Originally Posted by: midwestSS

As promised - the following will set the modal login box to disabled via the YAF_Registry table. You might have to alter it to reflect the proper database owner name (and table prefix if you are not using the default prefix of YAF_). This needs to be run in an SQL Query either using SQL Management Studio or whatever tool you have that allows you to run a query against your SQL server.


UPDATE dbo.yaf_Registry SET Value = 0 WHERE Name = 'useloginbox'

You will then need to restart the application pool serving your YAF forum. This can be done by making a change to your web.config (such as inserting a simple carriage return somewhere and saving) if you don't have access to your IIS controls for the server. ASP.NET recycles it's app pool when changes are made to the web.config file.

Edited by user 13 years ago | Reason: Not specified

If you can't find it using the forum search, try my signature link -- searches this site using Google: Google is my Friend

bbobb
100% (Exalted)
YAF Developer

13 years ago

#28

Found another issue: clicking on admin\users and roles\roles ran into this error (line 108):

Originally Posted by: tommy382

Really, I can't reproduce it:? , anyway it should be fixed in the latest svn as far as I can see.

midwestSS
100% (Exalted)
YAF MVP

13 years ago

#29

Found another issue: clicking on admin\users and roles\roles ran into this error (line 108):

Originally Posted by: bbobb

Really, I can't reproduce it:? , anyway it should be fixed in the latest svn as far as I can see.

Originally Posted by: tommy382

i can confirm this issue.. have it on mine with this release..

SilhouetteBS
72.2% (Friendly)
YAF Lover

13 years ago

#30

FYI - The Readme.htm under Step 3 for upgrading it says that the config files are in folder called /webconfigs. The folder does not exist in this version. Both configs are on the root.

Important Information: