Thread

I’ve had this issue come up twice now and I am stumped.

I have created a client login for ExpressionEngine and the client has been been making changes. Over this weekend the client tried to login and was denied and she tried 4 times. She then waited a hour and tried again and no luck. She then waited a full day and still no luck. She then tried to reset the password and no luck.

She has called me and I have tried to reset the password and no luck. I have even tried deleting her account, making a new account with the same user name and new password, but still no luck. However if I delete the account and make a new account with a new username and password then it works.

I have also had this happen to one of my superadmin accounts before.

Anyone have any idea whats going on and how to fix this?

RezStream Admin,

We’re sorry this is presenting an issue for you and your client. Can you share with us what version of ExpressionEngine you are using? Did you have any success if you reset the password for the user via the Control Panel as a Super Admin?

Cheers,

Dan,

The version of EE I’m using is v2.2.0. To answer your second questions when I was changing the client password I was logged in as myself witch is super admin.

One of our developers emailed me with the code below. It seems to fixed the issue, but I am still not sure why. If anyone could shed some light it would be most appreciated. Also Dan thank you for replying back to my post.

Here is the code that was sent to me.

In the system/expressionengine/libraries/Session.php, change this:

$expire = time() - $interval;

      $lockout = $this->EE->db->select(“COUNT(*) as count”)
                      ->where(‘login_date > ‘, $expire)
                      ->where(‘ip_address’, $this->EE->input->ip_address())
                      ->where(‘user_agent’, $this->userdata[‘user_agent’])
                      ->or_where(‘username’, $username)
                      ->get(‘password_lockout’);

To this:

$expire = time() - $interval;
      $p_where = “(user_agent =’{$this->EE->db->escape_str($this->userdata['user_agent'])}’ OR username=’{$this->EE->db->escape_str($username)}’)”;

      $lockout = $this->EE->db->select(“COUNT(*) as count”)
                      ->where(‘login_date > ‘, $expire)
                      ->where(‘ip_address’, $this->EE->input->ip_address())
                      ->where($p_where)
                      ->get(‘password_lockout’);

Hi RezStream Admin,

Would it be possible for you to upgrade your site to the latest version of ExpressionEngine (2.2.2)?

There have been many bugs fixed since 2.2.0 and this may help get rid of the problem you’re having.

I’m afraid we wouldn’t be able to support you further if you are modifying core system files like you have shown above and I would advise for you to put everything back as it was before so that we can try to sort this out for you.

One thing you could try is to look in your database for a table called exp_security_hashes and empty that table.

There was a bug a while back which you may be experiencing here involving that tables contents.

I would still highly advise updating your site to the latest version though as there have been many improvements since the version you are running at the moment.

Hope that helps.

Mark