Joomla! 1.0.13 embedding situation

endi

Joined: 2007-12-26
Posts: 2

Posted: Wed, 2007-12-26 22:30

So what exactly is the state of the art?

- Is 4theweb's bridge v2.0.14 compatible with Joomla! 1.0.13's seeded authentication?
- Is serblanc's mod (at http://www.e-poze.ro/downloads) the solution? Does it have any side effects? Does it, for instance, assume useralbums is installed? (because i see a mention to it in the code serblanc added to the bridge)

Thank you very much!

Andrea

serbanc

Joined: 2006-05-19
Posts: 314

Posted: Thu, 2007-12-27 10:40

1. yes it is. however, due to new pasword encryption in J, you will not be able to log in to G standalone. to do that, you need to modify J's code.

2. I do not know. what is the problem ?
it does not assume useralbums installed. If you want to use that feature, you have to have useralbums installed.
Side effects: as of today, there are not known side effects.

serbanc - www.e-poze.ro

erichorne

Joined: 2008-01-29
Posts: 8

Posted: Wed, 2008-01-30 14:09

I've looked and looked and looked to try and solve this J password incompatibility with G problem. All I have been able to find are answers like those above ("Yep, it doesn't work"). While that is informative and comforting, it is not entirely helpful.

Logging into Joomla first does seem to work around the issue; but that's not really the fix is it?
You can also use the "forgot password" link on G to change your standalone password back to something that you know. Tediousness aside, your password will get reverted the next time the users are sync'd.

Can anyone provide coding hints as to how to restore stand-alone G login? Changing J doesn't seem like the right thing to do. Changing G to use J's password checking seems like the correct fix; but the fact that no one has coded a solution makes me wonder if there is more to the problem (or if G integration with J is dying and no one really cares anymore).

I'm willing to dive in and try to address the problem; just need a little help getting started.

Thanks!

serbanc

Joined: 2006-05-19
Posts: 314

Posted: Wed, 2008-01-30 18:40

the problem is like this:
when I took out J from my site, I also lost some files. The modified file was one of those files.
Not having J anymore, I cannot test.
If you agree to participate to test, I can try to code, then submit to you, bug-solving....

serbanc - www.e-poze.ro

erichorne

Joined: 2008-01-29
Posts: 8

Posted: Thu, 2008-01-31 13:46

Let's do it.. Send me the files, I'll install them onto a play joomla box and we'll work from there.

Thanks!

-Eric

serbanc

Joined: 2006-05-19
Posts: 314

Posted: Thu, 2008-01-31 17:40

ok, I am modifying the files and post here.
focus first on frontend login, then on admin login, then on registration.

serbanc - www.e-poze.ro

serbanc

Joined: 2006-05-19
Posts: 314

Posted: Thu, 2008-01-31 21:04

so, a joomla.php modified to save passwords as md5 hash.
it is a joomla.php from a J1.0.14 !!!

feedback pls.

serbanc - www.e-poze.ro

serbanc

Joined: 2006-05-19
Posts: 314

Posted: Sat, 2008-02-02 09:15

any feedback ?

serbanc - www.e-poze.ro

AllanB

Joined: 2007-03-01
Posts: 40

Posted: Mon, 2008-02-25 15:31

So are you saying that the solution to the problem is to simply upgrade to J1.0.14? Or 1.0.15 now?

I am using G2 wrapped because of this problem.

endi

Joined: 2007-12-26
Posts: 2

Posted: Mon, 2008-02-25 18:05

Wait - I'm not sure whether there is actually a problem... if you want to authenticate as a Joomla! user, use Gallery from inside the bridge only. I am currently running Gallery 2.2.4 on Joomla! 1.0.15 with the original bridge and I don't need to log myself directly into Gallery since Joomla! handles the authentication.

First I log myself into Joomla!, then I can also navigate to gallery2/main.php (unbridged Gallery) and there I find myself already logged in: probably the bridge sets the right cookie and everything works fine. I don't want site visitors to see Gallery unbridged and for myself, if I really need it, I know this workaround... so, nothing is broken...

AllanB

Joined: 2007-03-01
Posts: 40

Posted: Tue, 2008-02-26 20:30

Anything I've read thus far says that if you use G2 bridged in Joomla 1.0.13, you won't then be able to use your password for your Gallery 2 standalone.

What is the situation?

mw46

Joined: 2008-04-11
Posts: 1

Posted: Fri, 2008-04-11 23:32

OK, I just did a quick hack to get G 2.2.4 and J 1.0.15 (bridged) to work both. I wanted to user Gallery_Remote and that's suffering from the same problem.

In contrast to serbanc, I changed the G code to handle the J hashed password;-)

A little diff of my change;-)

--- ./modules/core/classes/GalleryUser.class.orig       2008-03-31 10:13:35.000000000 -0800
+++ ./modules/core/classes/GalleryUser.class    2008-04-11 16:16:54.000000000 -0700
@@ -171,6 +171,15 @@
      */
     function isCorrectPassword($password) {
        $valid = $this->getHashedPassword();
+        /* mw46 joomla integration */
+        if (strpos($valid, ':') > 0) {
+          list($hash, $salt) = explode(':', $valid);
+          $guess = md5($password.$salt);
+
+          return (!strcmp($guess, $hash));
+        }
+        /* end mw46 */
+
        $salt = substr($valid, 0, 4);
        /* Support both old (G1 thru 1.4.0; G2 thru alpha-4) and new password schemes: */
        $guess = (strlen($valid) == 32) ? md5($password) : ($salt . md5($salt . $password));

For me, the Remote_Gallery works again;-)

I know, this is probably not the best idea to change the core G code, a pluggable setup would probably be better. But I needed a working solution quickly.

UnderScore12

Joined: 2008-11-21
Posts: 1

Posted: Fri, 2008-11-21 10:13

Hi!

What you write is right and solves the problem. But then the Gallery2 doesn't work as standalone! So if you want your Gallery2 works standalone and ebedded you could Download my GalleryUser.class from my website. There I explained the problem said how to get it workin!

http://michael-klemm.com/artikel/joomla_gallery2/

Best Regards

Michael

pretten

Joined: 2009-03-06
Posts: 2

Posted: Fri, 2009-03-06 02:16

I am new to joomla and still learning thanks for this info.

endi Joined: 2007-12-26 Posts: 2	Posted: Wed, 2007-12-26 22:30
	So what exactly is the state of the art? - Is 4theweb's bridge v2.0.14 compatible with Joomla! 1.0.13's seeded authentication? - Is serblanc's mod (at http://www.e-poze.ro/downloads) the solution? Does it have any side effects? Does it, for instance, assume useralbums is installed? (because i see a mention to it in the code serblanc added to the bridge) Thank you very much! Andrea
	XUser login Username: * Password: * Create new account Request new password
serbanc Joined: 2006-05-19 Posts: 314	Posted: Thu, 2007-12-27 10:40
	1. yes it is. however, due to new pasword encryption in J, you will not be able to log in to G standalone. to do that, you need to modify J's code. 2. I do not know. what is the problem ? it does not assume useralbums installed. If you want to use that feature, you have to have useralbums installed. Side effects: as of today, there are not known side effects. serbanc - www.e-poze.ro

erichorne Joined: 2008-01-29 Posts: 8	Posted: Wed, 2008-01-30 14:09
	I've looked and looked and looked to try and solve this J password incompatibility with G problem. All I have been able to find are answers like those above ("Yep, it doesn't work"). While that is informative and comforting, it is not entirely helpful. Logging into Joomla first does seem to work around the issue; but that's not really the fix is it? You can also use the "forgot password" link on G to change your standalone password back to something that you know. Tediousness aside, your password will get reverted the next time the users are sync'd. Can anyone provide coding hints as to how to restore stand-alone G login? Changing J doesn't seem like the right thing to do. Changing G to use J's password checking seems like the correct fix; but the fact that no one has coded a solution makes me wonder if there is more to the problem (or if G integration with J is dying and no one really cares anymore). I'm willing to dive in and try to address the problem; just need a little help getting started. Thanks!

serbanc Joined: 2006-05-19 Posts: 314	Posted: Wed, 2008-01-30 18:40
	the problem is like this: when I took out J from my site, I also lost some files. The modified file was one of those files. Not having J anymore, I cannot test. If you agree to participate to test, I can try to code, then submit to you, bug-solving.... serbanc - www.e-poze.ro

erichorne Joined: 2008-01-29 Posts: 8	Posted: Thu, 2008-01-31 13:46
	Let's do it.. Send me the files, I'll install them onto a play joomla box and we'll work from there. Thanks! -Eric

serbanc Joined: 2006-05-19 Posts: 314	Posted: Thu, 2008-01-31 17:40
	ok, I am modifying the files and post here. focus first on frontend login, then on admin login, then on registration. serbanc - www.e-poze.ro

serbanc Joined: 2006-05-19 Posts: 314	Posted: Thu, 2008-01-31 21:04
	so, a joomla.php modified to save passwords as md5 hash. it is a joomla.php from a J1.0.14 !!! feedback pls. serbanc - www.e-poze.ro

serbanc Joined: 2006-05-19 Posts: 314	Posted: Sat, 2008-02-02 09:15
	any feedback ? serbanc - www.e-poze.ro

AllanB Joined: 2007-03-01 Posts: 40	Posted: Mon, 2008-02-25 15:31
	So are you saying that the solution to the problem is to simply upgrade to J1.0.14? Or 1.0.15 now? I am using G2 wrapped because of this problem.

endi Joined: 2007-12-26 Posts: 2	Posted: Mon, 2008-02-25 18:05
	Wait - I'm not sure whether there is actually a problem... if you want to authenticate as a Joomla! user, use Gallery from inside the bridge only. I am currently running Gallery 2.2.4 on Joomla! 1.0.15 with the original bridge and I don't need to log myself directly into Gallery since Joomla! handles the authentication. First I log myself into Joomla!, then I can also navigate to gallery2/main.php (unbridged Gallery) and there I find myself already logged in: probably the bridge sets the right cookie and everything works fine. I don't want site visitors to see Gallery unbridged and for myself, if I really need it, I know this workaround... so, nothing is broken...

AllanB Joined: 2007-03-01 Posts: 40	Posted: Tue, 2008-02-26 20:30
	Anything I've read thus far says that if you use G2 bridged in Joomla 1.0.13, you won't then be able to use your password for your Gallery 2 standalone. What is the situation?

mw46 Joined: 2008-04-11 Posts: 1	Posted: Fri, 2008-04-11 23:32
	OK, I just did a quick hack to get G 2.2.4 and J 1.0.15 (bridged) to work both. I wanted to user Gallery_Remote and that's suffering from the same problem. In contrast to serbanc, I changed the G code to handle the J hashed password;-) A little diff of my change;-) --- ./modules/core/classes/GalleryUser.class.orig 2008-03-31 10:13:35.000000000 -0800 +++ ./modules/core/classes/GalleryUser.class 2008-04-11 16:16:54.000000000 -0700 @@ -171,6 +171,15 @@ / function isCorrectPassword($password) { $valid = $this->getHashedPassword(); + / mw46 joomla integration / + if (strpos($valid, ':') > 0) { + list($hash, $salt) = explode(':', $valid); + $guess = md5($password.$salt); + + return (!strcmp($guess, $hash)); + } + / end mw46 / + $salt = substr($valid, 0, 4); / Support both old (G1 thru 1.4.0; G2 thru alpha-4) and new password schemes: */ $guess = (strlen($valid) == 32) ? md5($password) : ($salt . md5($salt . $password)); For me, the Remote_Gallery works again;-) I know, this is probably not the best idea to change the core G code, a pluggable setup would probably be better. But I needed a working solution quickly.

UnderScore12 Joined: 2008-11-21 Posts: 1	Posted: Fri, 2008-11-21 10:13
	Hi! What you write is right and solves the problem. But then the Gallery2 doesn't work as standalone! So if you want your Gallery2 works standalone and ebedded you could Download my GalleryUser.class from my website. There I explained the problem said how to get it workin! http://michael-klemm.com/artikel/joomla_gallery2/ Best Regards Michael

pretten Joined: 2009-03-06 Posts: 2	Posted: Fri, 2009-03-06 02:16
	I am new to joomla and still learning thanks for this info. pangasinan \| web solutions \| web sketchers\|alleahkris \|pc clinic \| san nicolas

Joomla! 1.0.13 embedding situation

XUser login