Web Wiz Forums - Admin cannot login, captcha problem

Print Page | Close Window

Admin cannot login, captcha problem

Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=28074
Printed Date: 02 April 2026 at 12:40am
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com

Topic: Admin cannot login, captcha problem

Posted By: vinothrao84
Subject: Admin cannot login, captcha problem
Date Posted: 28 November 2009 at 12:21pm

Hi,

I'm currently using your latest WWF v9.64. Whenever i want to login in to admin page, the captcha is not validating my input.

I check through the codes and compare with my previous WWF v9.53, the code fail to pass on "Function getSessionItem" file "function_session_data.asp" on line "If InStr(saryUserSessionData(intSessionArrayPass), strSessionKey) Then"

The WWF v9.53 does not have any problem and pass the same function smoothly. I did some "response.write" to capture data between the 2 version. Below is the function.

Output result:

v9.64
======================
sessionid = LV-1
sessionid = UID-1

v9.53
======================
sessionid = LV5
InStr = LV=2009-11-28 06:54:29
sessionid = UID5
InStr = UID=vinothZ842CA856A

If you notice, the "InStr" is not shown for v9.64 after the "IF" statement.

Please help for this issue, i was solving this problem for days.

Replies:

Posted By: 123Simples
Date Posted: 28 November 2009 at 6:54pm

Hi - this is not normally an error I've seen before. I suggest that you try re-uploading the files again, as I'm pretty certain you may have missed a file somewhere if you have upgraded
As far as I know (and I run several versions including 9.64) this error is probably due to a missing file

-------------
http://www.123simples.com/" rel="nofollow - Visit 123 Simples Web Design

Posted By: vinothrao84
Date Posted: 29 November 2009 at 3:46am

hi,

thx for reply.

i havent upload any file to my server. but i did a direct test once i download the latest version.

it ran through a wizard and completes it. i can login as user but not admin page. admin page the captcha is really making me headache.

i have no idea why it does not goes through the IF statement.
or is there a way to bypass that captcha for admin page?

pls help. my project is stop due to this.

thx.

Posted By: WebWiz-Bruce
Date Posted: 30 November 2009 at 11:11am

There is no reason for this error and the only reason which could explain it is that you either have a corrupted file or you have not updated all the files from your previous release.

Due to a security issue back in 9.62 the admin login was changed to make to more secure amd the way session are handles was also changed. The forum has been download around 5,000 times since then and have not had anyone report any issues login into the admin area.

However, due to this change, which was very large, you need to update all the files in your forum, if you don't you may have login issues and other problems like you are experiencing.

-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting

Posted By: vinothrao84
Date Posted: 01 December 2009 at 1:55am

hi,

thx for reply.

i check with another pc, and notice that pc have no such problem.
i suspect is the IIS. I'm using Windows 7 Ultimate IIS 7.5. The other pc was running IIS 6.

So is the IIS 7.5 giving problem to the forum?

Thx.

Posted By: WebWiz-Bruce
Date Posted: 01 December 2009 at 10:36am

This support forum is running on Windows 2008 R2 IIS 7.5 and we have 100's of other Web Wiz Forums running on IIS 7.5 on our network without any issues, so can not see it being IIS 7.5 being the problem.

Since 9.6x sessions are now stored within the database rather than in the web servers memory which makes sessions ore reliable so your session check in your first post would be different between both versions.

One thing you should check is that you have sessions cookies enabled in your web browser. Also if you are running Windows 7 x64 you may want to change your IIS 7.5 application pools to enable 32 bit applications as this gives better compatibility and according to Microsoft better performance and memory management.

-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting

Posted By: vinothrao84
Date Posted: 02 December 2009 at 12:23pm

hi,

im using 32 bit windows.
i try to reinstall the IIS, but still no hope.

Posted By: WebWiz-Bruce
Date Posted: 02 December 2009 at 12:40pm

I am at a loss to know what else to suggest, but you are certainly doing something wrong somewhere.

The only thing left to suggest is go back and reinstall the forum again making sure ALL files you are using are from the latest version and you are not attempting to use any old files from a previous release.

-------------
https://www.webwiz.net/web-wiz-forums/forum-hosting.htm" rel="nofollow - Web Wiz Forums Hosting
https://www.webwiz.net/web-hosting/windows-web-hosting.htm" rel="nofollow - ASP.NET Web Hosting

Posted By: venki
Date Posted: 13 December 2009 at 8:49pm

I also have same problem, I downloaded new version and installed it to iis7 and MSSQL, forum is workin and when I try to login on admin page, I get error for CAPTCHA code. I use IE8 and accept all cookies is on. Also, I didn't had any older versions instaled on server.

I try to look up for an error, and it seems that file where image is generated, CAPTCHA_image.asp don't save session of displayed image, I tested it whit reading of getSessionItem("SCS") on another page, after image was generated.

Also tryed it in a FireFox, but no luck.

Posted By: venki
Date Posted: 13 December 2009 at 9:04pm

I did manage to work it out...

Dont use http://localhost/" rel="nofollow - http://localhost/ to access page, instead use http://127.0.0.1/" rel="nofollow - http://127.0.0.1/ and it works...

Posted By: namviet
Date Posted: 30 January 2010 at 4:49pm

I got the same problem.

For the temporary solution, you can disable the check CAPTCHA function by editing the code in functions_login.asp as bellow:


        'Increment login attempts
        intLoginAttempts = intLoginAttempts + 1

'BEGIN EDIT
intLoginAttempts = 1
'END EDIT
                
        
        'If CAPTCHA is NOT required only enable it if login attempts are above 3
        If blnCAPTCHArequired = True OR intLoginAttempts => 3 Then
                
            'Set the blnCAPTCHArequired to true
            blnCAPTCHArequired = true
            
            'If the login attempt is above 3 then check if the user has entered a CAPTCHA image
            If LCase(getSessionItem("SCS")) = LCase(Trim(Request.Form("securityCode"))) AND getSessionItem("SCS") <> "" Then 
                blnSecurityCodeOK = True
                loginUser = 2
            Else
                blnSecurityCodeOK = False
                loginUser = 3
            End If
            
            'Distroy session variable
            Call saveSessionItem("SCS", "")
        End If
        
'BEGIN EDIT
blnSecurityCodeOK = True
blnCAPTCHArequired = false
'END EDIT        
        
        

        'Only encrypt password if this is enabled
        If blnEncryptedPasswords Then

Goodluck!

-------------
an old newbie!

Posted By: 123Simples
Date Posted: 30 January 2010 at 5:31pm

Bypassing the CAPTCHA is not the actual solution though - you are really lowering the forum defences by doing that surely?

-------------
http://www.123simples.com/" rel="nofollow - Visit 123 Simples Web Design

Posted By: Falcon_
Date Posted: 11 February 2010 at 4:52am

venki wrote:

I did manage to work it out...

Dont use http://localhost/" rel="nofollow - http://localhost/ to access page, instead use http://127.0.0.1/" rel="nofollow - http://127.0.0.1/ and it works...

I did have the same problem with a fully new installation. I downloaded and reinstall the forum 3 times, just to make sure. I have also Windows7 with IE8 running. Using http://127.0.01" rel="nofollow - http://127.0.01 instead of localhost did worked very well.

Rene