YAFLogo

tommy382
12 years ago
Permission for what user? The "users" account already have FULL permission - I made it full to be safe.

Update: I even allow "everyone" account FULL permission, doesn't help. The [assembly:] attribute in the link you gave apply on which file?
tommy382
12 years ago
I found a fix for this security issue. For some reason, if I use .NET 4.0 to power the forum, it works. If I use .NET 3.5sp1 to power the forum, the security error pop-up 99% of the times - 1% it works normally even when the application pool is .NET 2.0 (v3.5sp1 installed but referenced as ".NET 2.0" in IIS7).

I checked every projects in the YAF solution and they all have target set to .NET 3.5, not 4.0. This is weird but I don't mind running using .NET 4.0. Any known issue w/ the forum running with .NET 4.0? I have been running w/ 3.5 until now.
midwestSS
12 years ago
im finding an issue after i upgraded my site, that when you click the login button, its putting a # in the url
such as silveradoss.net/# this is causing the logon box to pop up.. then go away before you can type in it...
squirrel
12 years ago
Originally Posted by: tommy382 

I found a fix for this security issue. For some reason, if I use .NET 4.0 to power the forum, it works. If I use .NET 3.5sp1 to power the forum, the security error pop-up 99% of the times - 1% it works normally even when the application pool is .NET 2.0 (v3.5sp1 installed but referenced as ".NET 2.0" in IIS7).

I checked every projects in the YAF solution and they all have target set to .NET 3.5, not 4.0. This is weird but I don't mind running using .NET 4.0. Any known issue w/ the forum running with .NET 4.0? I have been running w/ 3.5 until now.



Your issue is related to a TRUST setting. I've run in to this before both on my development server and on a Plesk based IIS 6 server. Granting the application Full Trust resolved it on my end.
If you can't find it using the forum search, try my signature link -- searches this site using Google: Google is my Friend 
Jaben
  • Jaben
  • 100% (Exalted)
  • YAF Developer Topic Starter
12 years ago
Originally Posted by: tommy382 

Permission for what user? The "users" account already have FULL permission - I made it full to be safe.

Update: I even allow "everyone" account FULL permission, doesn't help. The [assembly:] attribute in the link you gave apply on which file?


I tried with .NET v3.5 and I still couldn't reproduce the issue. Is anyone else having this problem?
squirrel
12 years ago
Originally Posted by: Jaben 

Originally Posted by: tommy382 

Permission for what user? The "users" account already have FULL permission - I made it full to be safe.

Update: I even allow "everyone" account FULL permission, doesn't help. The [assembly:] attribute in the link you gave apply on which file?


I tried with .NET v3.5 and I still couldn't reproduce the issue. Is anyone else having this problem?



It's a rarity that it occurred to me -- but it did happen right after AutoFac appeared in the SVN that I hit it. When I search the error in general most .NET users have had the issue when accessing files that don't have sufficient permissions in the directory tree (not related to YAF or AutoFac so to speak, either).
If you can't find it using the forum search, try my signature link -- searches this site using Google: Google is my Friend 
midwestSS
12 years ago
Is there something different in this RTW in regards to timing at the login?
what i mean is, ive got this in a dev environment, looking at a backup of my production database. as i usually do.
while im having login issues (web.config.. i know).. im seeing that i try to login.. just goes back to the main screen, not logged in.. i try to login again, the logon box comes up.. and disappears quickly, going back to the main forum screen.. however if i wait a minute or two, and then try to login, the login box stays, i can put in my username\pw and of course due to web.config, its going back to the main screen, not logged in..

so.. do you know why i have to wait to re try the login?
squirrel
12 years ago
Originally Posted by: midwestSS 

Is there something different in this RTW in regards to timing at the login?
what i mean is, ive got this in a dev environment, looking at a backup of my production database. as i usually do.
while im having login issues (web.config.. i know).. im seeing that i try to login.. just goes back to the main screen, not logged in.. i try to login again, the logon box comes up.. and disappears quickly, going back to the main forum screen.. however if i wait a minute or two, and then try to login, the login box stays, i can put in my username\pw and of course due to web.config, its going back to the main screen, not logged in..

so.. do you know why i have to wait to re try the login?



Try turning off the Modal Login boxes in your config. We had an issue with them a while back in the SVN phase.
If you can't find it using the forum search, try my signature link -- searches this site using Google: Google is my Friend 
midwestSS
12 years ago
can you point me in the right direction for that?
tommy382
12 years ago
Found another issue: clicking on admin\users and roles\roles ran into this error (line 108):
Index was outside the bounds of the array.
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.IndexOutOfRangeException: Index was outside the bounds of the array.

Source Error:

Line 106:                bool isLast = false;
Line 107:              
Line 108:                foreach (string row in styles)
Line 109:                {
Line 110:                    {


Source File: D:\!Sites\Yaf1955RTW\YAF.Controls\UserStyles.cs    Line: 108

Stack Trace:

[IndexOutOfRangeException: Index was outside the bounds of the array.]
   YAF.Controls.RoleRankStyles.Render(HtmlTextWriter writer) in D:\!Sites\Yaf1955RTW\YAF.Controls\UserStyles.cs:108
   System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) +246
   System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) +246
   System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) +246
   YAF.Controls.AdminMenu.Render(HtmlTextWriter writer) in D:\!Sites\Yaf1955RTW\YAF.Controls\YafAdminMenu\AdminMenu.cs:225
   System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) +246
   YAF.Core.ForumPage.Render(HtmlTextWriter writer) in D:\!Sites\Yaf1955RTW\YAF.Core\BasePages\ForumPage.cs:561
   System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) +246
   YAF.Forum.Render(HtmlTextWriter writer) +338
   System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) +246
   System.Web.UI.HtmlControls.HtmlForm.RenderChildren(HtmlTextWriter writer) +315
   System.Web.UI.HtmlControls.HtmlContainerControl.Render(HtmlTextWriter writer) +48
   System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) +246
   System.Web.UI.Page.Render(HtmlTextWriter writer) +40
   System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +5274
squirrel
12 years ago
Originally Posted by: midwestSS 

can you point me in the right direction for that?



It's unfortunately in the host settings, which if you can't login, you can't get to. I'll look up where it's stored in the database and get you an SQL hack for it you can run.
If you can't find it using the forum search, try my signature link -- searches this site using Google: Google is my Friend 
squirrel
12 years ago
Originally Posted by: squirrel 

Originally Posted by: midwestSS 

can you point me in the right direction for that?



It's unfortunately in the host settings, which if you can't login, you can't get to. I'll look up where it's stored in the database and get you an SQL hack for it you can run.



As promised - the following will set the modal login box to disabled via the YAF_Registry table. You might have to alter it to reflect the proper database owner name (and table prefix if you are not using the default prefix of YAF_). This needs to be run in an SQL Query either using SQL Management Studio or whatever tool you have that allows you to run a query against your SQL server.


UPDATE dbo.yaf_Registry SET Value = 0 WHERE Name = 'useloginbox'

You will then need to restart the application pool serving your YAF forum. This can be done by making a change to your web.config (such as inserting a simple carriage return somewhere and saving) if you don't have access to your IIS controls for the server. ASP.NET recycles it's app pool when changes are made to the web.config file.
If you can't find it using the forum search, try my signature link -- searches this site using Google: Google is my Friend 
+1
bbobb
  • bbobb
  • 100% (Exalted)
  • YAF Developer
12 years ago
Originally Posted by: tommy382 

Found another issue: clicking on admin\users and roles\roles ran into this error (line 108):


Really, I can't reproduce it:? , anyway it should be fixed in the latest svn as far as I can see.
midwestSS
12 years ago
Originally Posted by: bbobb 

Originally Posted by: tommy382 

Found another issue: clicking on admin\users and roles\roles ran into this error (line 108):


Really, I can't reproduce it:? , anyway it should be fixed in the latest svn as far as I can see.



i can confirm this issue.. have it on mine with this release..

SilhouetteBS
12 years ago
FYI - The Readme.htm under Step 3 for upgrading it says that the config files are in folder called /webconfigs. The folder does not exist in this version. Both configs are on the root.
Similar Topics
Users browsing this topic
    YAF Logo Copyright © YetAnotherForum.NET & Ingo Herbote. All rights reserved
    About Us

    The YAF.NET is an open source .NET forum project. YAF.NET is supported by an team of international developers who are build community by building community software.

    Powered by Resharper Donate with PayPal button
    Useful Links