Need help with loginshare

[bbutle01]

I'm trying to get a loginshare for my website working. The site's completely custom, so nothing existing works. I used the tutorial on the site verbatim, I think.

The biggest thing that's different is that I haven't md5'd my passwords, I think I'm working around it as such:

 
//$userpassword = md5($password);
$userpassword = $password;

Logging in with logintest/logintest gives me the following in my sqllog

11883-           485747 Query       SELECT `vkey`, `data` FROM `swregistry` WHERE `vkey` IN('en-us:default')
11978-           485747 Query       SELECT * FROM `swsessions` WHERE sessionid = 'b4a88589c5a5cccfbaf56ed1d9fccb08'
12080-           485747 Query       UPDATE `swsessions` SET `lastactivity` = '1211934573' WHERE `sessionid` IN ('b4a88589c5a5cccfbaf56ed1d9fccb08')
12214-           485748 Connect    ####@########on
12271-           485748 Init DB     cc
12296:           485748 Query       SELECT * FROM `users_usr` WHERE `username_usr` = 'logintest'
12379-           485747 Query       UPDATE `swsessions` SET `typeid` = '0' WHERE `sessionid` = 'b4a88589c5a5cccfbaf56ed1d9fccb08'
12495-           485747 Query       SELECT * FROM `swtemplates` WHERE tgroupid = '1' AND name IN('redirect')
12590-           485747 Query       SELECT templates.*, templatedata.*, templategroups.title AS tgrouptitle, templategroups.description AS tgroupdescription, templategroups.companyname FROM `swtemplates` AS templates LEFT JOIN `swtemplatedata` AS templatedata ON (templates.templateid = templatedata.templateid) LEFT JOIN `swtemplategroups` AS templategroups ON(templates.tgroupid = templategroups.tgroupid) WHERE templategroups.tgroupid = '1' AND templates.name IN('redirect')
13054-           485747 Quit
13076-           485748 Quit

I tried sticking in

 
print_r($_user);
break;

in there to debug, and the break works, but it will never output the info... how is this turned off?

[bbutle01]

I did just change if (empty($_user["id"])) to if (empty($_user["id_usr"])).

[bbutle01]

Well, that worked... forgot I was testing with a bad password just to be sure

Now, to get it to share session data with my existing app so they don't even HAVE to log in...

[supportskins]

Now, to get it to share session data with my existing app so they don't even HAVE to log in

If you are successful please do share on how you did it. Alot of Kayako clients want to make this work. Good luck!

[bbutle01]

I thought I had this all working, but I'm getting a strange behaviour...

First, FYI, for some reason print_r doesn't work in this, but vardump does.

Anyway, the first time a person tries to log in, it works. Once they are in I can go in the user manager and see that they have been added. That doesn't seem right to me.

The SECOND time they log in, it doesn't work.

If I delete the user in usermanager, but leave them in my system, it works fine.

I've attached my lastest loginshare.

Looking in my user table in the database, the users are getting moduleid 230, which is vipershare... which makes me wonder if I missed something in these two files. Manually setting it to 500 (Which is mine) doesn't fix it. Neither does using the pass that's autogenerated in the users table...

Ideas?

[bbutle01]

Thanks...

Not sure if I'm going to try to include some if their files on my login page, or just try to forge the session data from scratch... One thing at a time.

[bbutle01]

Supportskins... I cleared my cookies and logged in and did NOTHING else. This is what it creates:

SWIFT_visitor a:4:{s:11:"countrycode";s:4:"none";s:11:"countryna me";s:4:"none";s:9:"notecheck";s:1:"1";s:8:"isbann ed";s:1:"0";}

SWIFT_client a:1:{s:7:"groupid";s:1:"1";}
SWIFT_sessionid80 8ab0546fbe763453f0fb0c108257e946
SWIFT_sessionid40 14041d461a8a345f503c2aadb4ff06b2


Actually, the first 2 lines are URL encoded, This is the decoded version.

Do the second two lines look familiar? I did a mysqldump and didn't find the values there. I searched the session folder on the server, not their either.

Does anyone know what those values are?

[bbutle01]

From what I've figured as soon as you hit the site sessionids are generated... then later after you log in it marks those ids as logged in, in the sessions table...

Now, where the heck are they being generated?

I cleared all the cookies and watched my mysql log, and it appears the first occurance of a new session going into the database is when this is called:

REPLACE INTO `swsessions` (`sessionid`, `ipaddress`, `lastactivity`, `useragent`, `isloggedin`, `sessiontype`, `typeid`, `dateline`, `status`) VALUES('db727bd83414f2d92933c82cf5789558', '192 .168.1.10', '1213406775', 'Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.8.1.14)', '0', '40', '0', '1213406775', '0')


But fgrepping through the code doesn't find it