Web Wiz Forums - Admin Woes

Admin Woes

Printed From: Web Wiz Forums
Category: Web Wiz Web App Support Forums
Forum Name: Web Wiz Forums
Forum Description: Support forum for Web Wiz Forums application.
URL: https://forums.webwiz.net/forum_posts.asp?TID=31481
Printed Date: 29 March 2026 at 4:41am
Software Version: Web Wiz Forums 12.08 - https://www.webwizforums.com

Topic: Admin Woes

Posted By: RSI
Subject: Admin Woes
Date Posted: 26 May 2017 at 1:43am

Hi Forum

I put the forum on a IIS 7.5 2008R2 server with SQL Server backend, a ssl (https) and asp.net framework/websites. Everything is working fine except for the administrator. when i log in and go to the admin control panel, issue start to happen. I get a security alert error

Your Admin Login Username and Password are not secure

I have a good password, according to the rules and tried new ones, but nothing worked. Its still shows no matter what i do.

Another issue is the Membership Admin. I navigate to that screen and i lose all CSS and images do not load. I looked at the Delete image and its pointing to a non-existent director ".../dforum_images/33delete.png". This directory and the image are not even in the zip file download - web_wiz_forums_v11.10.zip.
https://www.regsysincforums.com/s/adminmember.jpg
Can someone shed some light on these issue? Any help is much appreciated.

Thanks
Brian

Replies:

Posted By: RSI
Date Posted: 26 May 2017 at 1:44am

https://www.regsysincforums.com/s/adminmember.jpg - https://www.regsysincforums.com/images/adminmember.jpg

This is what the screen looks like.

Posted By: RSI
Date Posted: 26 May 2017 at 1:49am

Sorry keep hijacking my own thread. Also part of this admin woes is the issue of deleting members. It errors out every time i try.

Error

Only members with sufficient permission can access this page.

A security error has occurred with authentication.

Please ensure that all cookies are enabled on your web browser, you are not using a saved or cached copy of the page, and your Firewall/Proxy settings are not hiding or masking your IP address.

Posted By: RSI
Date Posted: 26 May 2017 at 2:22am

Gah - looks like i remove the "d" and "33" from the delete url and the image is there in the forum_images folder. Okay so why the messed up url?

<img src="<% = strImagePath %>delete.png"

the strImagePath is messed up.

Posted By: IanSmithISA
Date Posted: 26 May 2017 at 10:01am

Good morning

I get a security alert error

Your Admin Login Username and Password are not secure

I have a good password, according to the rules and tried new ones, but nothing worked. Its still shows no matter what i do.

Have you changed the username from administrator, if you don't then you will always get this messages regardless of the password?

However this is just a warning and has no effect that I can see on the rest of your problems. :-(

It may help WebWiz if you can do a view page source for the page that you have linked to and look for the line that loads the style sheet,

It is about line 17.

If this is corrupted in the same way as the image links it may indicate something useful to those who know the code better.

Bye

Ian

-------------
Why does anyone need more than an 80x25 character only VDU?

Posted By: RSI
Date Posted: 26 May 2017 at 11:46am

I appreciate the response

I did change the password and indicated above

"I have a good password, according to the rules and tried new ones, but nothing worked. Its still shows no matter what i do."

I think you are on to something with it being corrupt - yeeouch! I looked at the source and the file is all screwed up, with numbers randomly everywhere.

<link href="

css_styles/default/

17d

default_style.css" rel="stylesheet" type="text/css" />

I replaced the file, with no luck. I'll start replacing the includes to see what works.

Posted By: RSI
Date Posted: 26 May 2017 at 3:45pm

Nothing seems to be working. Replacing the includes and the actual file itself.

Is there a WebWiz developer on that could shed some light on this?

Take a look at the doc and head element - wow!?!?!

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" dir="

ltr

" lang="en">

<head>

<meta http-equiv="Content-Type" content="text/html; charset=

utf-8

" />

<title>Forum Member Adminstration</title>

<meta name="generator" content="Web Wiz Forums" />

10b

<!--//

/* *******************************************************

Software: Web Wiz Forums(TM) ver. 11.10

Info: http://www.webwizforums.com

******************************************************* */

//-->

353

<script type="text/javascript" src="https://gc.kis.v2.scr.kaspersky-labs.com/38C2693F-B304-E245-A7DC-1347D04DF20D/main.js" charset="UTF-8"></script><script language="JavaScript">

function CheckForm () {

//Check for a somthing to search for

if (document.getElementById('frmMemberSearch').SF.value==""){

msg = "_______________________________________________________________\n\n";

msg += "The form has not been submitted because there are problem(s) with the form.\n";

msg += "Please correct the problem(s) and re-submit the form.\n";

msg += "_______________________________________________________________\n\n";

msg += "The following field(s) need to be corrected: -\n";

alert(msg + "\nMember Search\t- Enter a Members Username to search for\n\n");

document.getElementById('frmMemberSearch').SF.focus();

return false;

}

return true;

}

</script>

<script language="javascript" src="includes/default_javascript_v9.js" type="text/javascript"></script>

<script language="javascript" src="includes/admin_javascript_v9.js" type="text/javascript"></script>

<link href="

css_styles/default/

17d

default_style.css" rel="stylesheet" type="text/css" />

</head>

Thanks!

Posted By: IanSmithISA
Date Posted: 26 May 2017 at 5:40pm

Good afternoon,

I appreciate the response

I did change the password and indicated above

If you look in admin_menu.aspx you will see

If LCase(strLoggedInUsername) = "administrator" AND lngLoggedInUserID = 1 AND blnDemoMode = False Then

<br />

<tr>

<td><img src="<% = strImagePath %>error.png" alt="<% = strTxtError %>" /> <strong>SECURITY ALERT!!</strong>

Your Admin Login Username and Password are not secure.

<a href="admin_change_admin_username.asp">Update your Admin Login.</a>

</tr>

</table><%

End If

at around line 108.

So it is not the password that is the issue but the user name.

A long time ago I got into trouble when IIS took the first byes of the file as byte order encoding

Looking at your page source, the ab at the very start of the source looks like a byte order mark, sorry but that is are far as I go.:-)

I don't know enough about the WebWiz forum to really help but as I see the code, both the admin pages and the use pages get configuration information from the same include file

includes/global_variables_inc

which confuses me as to why you user pages work but the admin ones don't.

Bye

Ian

my admin-select_members,asp

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" " http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd" rel="nofollow - http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd" >

<head>

<title>Forum Member Adminstration</title>

<!--//

/* *******************************************************

Software: Web Wiz Forums(TM) ver. 11.07

Info: http://www.webwizforums.com" rel="nofollow - http://www.webwizforums.com

******************************************************* */

//-->

-------------
Why does anyone need more than an 80x25 character only VDU?

Posted By: RSI
Date Posted: 26 May 2017 at 6:21pm

Ah, right. I updated the username and the warning goes away. I will take a look at IIS converting it to bytes. Yes, all other admin screens seem fine,

Thanks for the info. Ill keep the post updated if i find anything. Hopefully a WebWiz dev can get in a check it out.

Thanks again!