krooman

Hi,
My users are not able to submit news. My publishers are not able to create new items. Can anyone help?
Cheers!

prenkema

Please state the nature of the medical emergency, do they get an error message or are they plain stupid

Did you create and enable the users and did you assign them editor and publisher rights ?

__________________
Going On, means going far, Going Far means Returning

krooman

Thanks. Actually, they do not get the editor to allow then to submit the content. As an admin, I log in from the frontend and found the same problem. No editior displays.
Thks

prenkema

Is you site on-line to see what's happening ?
In the global settings of the site did you select a editor ?
And what about the rights of the directories, are they set as well ?

__________________
Going On, means going far, Going Far means Returning

krooman

Prenkenma Thanks,
The site is www.portal.wadn.org
I will proceed and check the global settings.
Really appreciate your help.
Krooman

prenkema

apart from my private messages also I found this link for you :
http://www.tim-online.nl/index.php/c...+store+failed/

I think this is causing your problems.

by the way, please check and verify before we can start wroking on a solution

__________________
Going On, means going far, Going Far means Returning

krooman

Excellent...thanks

prenkema

Hi,

Please verify and confirm the user have the proper rights, they are Author, Editor or Publisher....

Several times when I try to submit News or a link : or I get the not authorized message : or submitting the news gives me only three buttons but no possibility to enter something, the weblinks show but don't allow me to save........

I fixed a similar problem for a co-worker by the following :
The problem itself is basically hand-made by Mambo. I would call it bug actually. Mambo is using a random number plus the REMOTE_ADDR to create a unique session ID using the md5() function. See mambo.php, line 2071:
Code:
$this->session_id = md5( $randnum . $_SERVER['REMOTE_ADDR'] );

When checking if a session ID has been given to the client Mambo of course decrypts the session ID (taken from the local cookie) with the same method using REMOTE_ADDR. See mambo.php, line 259:
Code:
if ($session->load( md5( $sessioncookie . $_SERVER['REMOTE_ADDR'] ) )) {

Since the request may come from a different proxy server having a different REMOTE_ADDR the comaprison to the originally assigned one fails. Voila, you get a new session ID.

Since the creation of the session ID is done via md5() applied to a combination of md5(uniqid( microtime(),1)) and REMOTE_ADDR, one can say that it is already unique even without combining it with REMOTE_ADDR. So for the sake of combining it with and IP address you can also use SERVER_ADDR (which at least will not change).

That is exactly what I have done in mambo.php to solved this problem:

mambo.php, line 259:
Code:
if ($session->load( md5( $sessioncookie . $_SERVER['SERVER_ADDR'] ) )) {

mambo.php, line 2071:
Code:
$this->session_id = md5( $randnum . $_SERVER['SERVER_ADDR'] );

Look luck and let me know

Peter

P.S. You have several problems, with pictures as well (they don't show)

__________________
Going On, means going far, Going Far means Returning

krooman

Peter,
This is great! Very great! I sent a mail to you the other day...did you get it?

Okay, I have edited the codes...However, nothing has changed. Its still the same. I check the permissions and they are okay.

I have changed the editor and its still the same?

Is there special security for the frontend that overrides any user settings?

Regards

prenkema

OK, we have to dig in a little bit more.
Switch on "Debug Site" (global configurastion) and see what happens when you try to submit a link and/or news (site show normal, but scroll down to see what happens, hopefully we get some information to investigate......
And do you have access to the log file of the webserver ??

Good Luck

__________________
Going On, means going far, Going Far means Returning