Thread

Hey -

Ive upgraded to 1.6.9 from 1.6.8 after an attack on a site hosted on a Mediatemple server.

The public site is working but I can no longer log in to the CP - once the username and password is entered it hangs on a blank index page - the address bar shows the url and query string

index.php?S=225b6b62072deaaefac088862ef89ac696ae6373

Can anyone suggest where Ive gone wrong and what I can do to repair the issue? I have been through the upgrade process before without issue…

thanks
Kevin

Sorry to bump this unnecessarily but its fairly urgent I resolve this - any help appreciated…

Try to add this to your config.php

$conf['cookie_domain'] = ".example.com";
$conf['cookie_path'] = "";
$conf['cookie_prefix'] = "";
$conf['admin_session_type'] = "c";
$conf['user_session_type'] = "c";
$conf['require_ip_for_login'] = "n";
$conf['require_ip_for_posting'] = "n"; 
$conf['secure_forms'] = "n";

See if that changes anything.

Hi, kev_horan.

Are you using the MSM?

Hey -

I tried that addition to the config, but the login form didn’t appear, and the site wasn’t accessible so I removed it again.

And no, Im not using the MSM…

K

I’ve tried adding that config code again - I can access the site after the warning in Google Chrome, but the CP index just hangs on the index.

Is there anything else I can do? This is urgent, as I can’t fully clean the site after the mediatemple issue without accessing the cp tp make changes.

K

Kevin,

in your /system/index.php file, and change the value of

error_reporting(0);

to

error_reporting(E_ALL);

Does that blank page throw an error for you now?

Just add this back into your config please

$conf['admin_session_type'] = "c";

and just visit system/index.php without he session bit at the end of the URL

What warning in Chrome are you referring to?
Can you try a different browser?

Can I confirm you did a version update as opposed to a build update?
Also read the version notes as if you use any of the add-ons listed you will need to upgrade them too.
http://expressionengine.com/legacy_docs/installation/version_notes_1.6.9.html

Hi John,

Thanks for your response.

I did a version update, from 1.6.8 to 1.6.9 - the site was showing a malware warning (thats the warning I was referring to in Chrome, there was a seperate post about it - sorry for being unclear). Another injection attack on Mediatemple’s servers, this time affecting js files.

The issue accessing the CP is occurring on all browsers.

I’ve amended the error reporting and added the line to config - it’s still the same result, a blank page.

I’d checked the plugins aswell, none of those are in use…

K

Sorry to be a pain - has anyone any other suggestions on how I can resolve or diagnose the blank index issue in the CP, or other steps I could take? At a bit of a loss…

There are a few more things you can do in an attempt to troubleshoot blank pages. Do you have access to your server’s PHP log files? They, too, should be able to tell us a little more about these errors.