Typo3 v9.5 BE login not working after fresh installation - typo3

I have installed fresh TYPO3 v9.5 in my local server. After complete installation i open the backed and then try to login with my username and password but every time i getting error. see below screenshot.
I try to search many solution for this but not getting success. I know about Argon2i password Hashing problems for new fresh Typo3 v9 installation. So, i select another password Hashing method via INSTALL TOOL. But still i am getting same error. Sometime i clear whole cache via install tool and open the back end, but when i enter my username and password will getting same error.
Someone help please.

This problem is associate with Apache. In Windows case you have to include in httpd.conf next lines:
<IfModule mpm_winnt_module>
ThreadStackSize 8388608
</IfModule>
Last thing you have to take into account with installation in Windows beacuse you should configure ssl in this system, is more easy in a Unix distribution based.
You could follow the tutorial in https://www.pagemachine.de/blog/tutorial-update-typo3-9lts-testsystem-windows-installieren/?cn-reloaded=1 , the only thing is this written in german.

I uncomment below line in httpd.conf file.
Include conf/extra/httpd-mpm.conf
And added below code in httpd-mpm.conf file and it's work fine for me.
<IfModule mpm_winnt_module>
ThreadStackSize 8388608
</IfModule>

Related

Can't login to the backend of a fresh TYPO3 install

Here is what I did:
Downloaded zip TYPO3 11.3.0 from https://get.typo3.org/version/11
Unzip into /subfolder
touch FIRST_INSTALL
Followed instructions of the setup wizard with new database
Try to login via /subfolder/typo3/ and enter credentials
/subfolder/typo3/login?loginProvider=... leads to a 404
What I already checked:
typo3temp/var/log/typo3_[...].log is empty
MAMP logs don't show anything suspicious
Install Tool Environment Status shows a weird error:
http://localhost:8888/subfolder/typo3temp/assets/e35bd633.tmp/e77fab4e.php.wrong: unexpected content PHP content
Install Tool Directory Status is all green
Original .htaccess file exists
Created typo3conf/sites/mysite/config.yaml by copying from an existing (working) project, TYPO3 10
Of course, before I created the site configuration YAML, /subfolder/typo3/login?loginProvider=... was leading to a "no site config" error.
Now, it feels like there is a problem with the .htaccess, but I can't pinpoint where.
Running Apache / PHP 7.4.12
You have to make sure to use the proper .htaccess configuration for CMS 11, so you can't just resue the one provided with CMS 10.
Have a look at this documentation of the related breaking change in TYPO3 CMS 11
https://docs.typo3.org/c/typo3/cms-core/main/en-us/Changelog/11.0/Breaking-93048-BackendURLRewrites.html

migrating TYPO3 6.2.31 to TYPO3 7.6.23

When I try to migrate my TYPO3 6.2.31 to 7.6.23 I've got some problems.
Especially the page tree is missing so I got this error
The requested resource "%2Fmain" was not found
I've tried this way to migrate:
1.) Copy the whole page
2.) Changing the symlinks to the new sources
3.) Starting the migration wizard in install tool
And now When I want to access the backend I got the above mentioned error.
what can I do?
thanks.
When I call url.de/typo3 the follwing url is called:
index.php?route=%252Fmain&token=XXX
The correct one should be
index.php?route=%2Fmain&token=XXX
What could be the problem in the url?
Please follow below steps.
Download typo3 7 LTS latest source and create symlink.
Add your typo3conf, uploads and fileadmin folder
Open install tools and clear both cache php and typo3.
Compare currentdatabse specification and perform all steps.
Go to upgrade wizard and complete all needed steps
Clear cache and remove typo3temp file and open BE
as mentioned here: Need to allow encoded slashes on Apache
Issue 1: Apache believes that's an invalid url
Solution: AllowEncodedSlashes On in httpd.conf
Issue 2: Apache decodes the encoded slashes
Solution: AllowEncodedSlashes NoDecode in httpd.conf (Requires Apache 2.3.12+)
Issue 3: mod_proxy attempts to re-encode (double encode) the URL changing %2F to
%252F (eg. /example/http:%252F%252Fwww.someurl.com/)
Solution: In httpd.conf use the ProxyPass keyword nocanon to pass the raw URL thru the proxy.
ProxyPass http://anotherserver:8080/example/ nocanon
httpd.conf file:
AllowEncodedSlashes NoDecode
<Location /example/>
ProxyPass http://anotherserver:8080/example/ nocanon
</Location>

Seeing "Page Not Found" on Activity, Members, Groups & Blogs tabs

I have installed the latest version of BuddyPress on a WP.
However, the Activity, Members, Groups, and Blogs tabs all show "Page not found" errors. or show me just a title.
Thanks for any help you can provide.
screenshot: http://oi43.tinypic.com/14cw45v.jpg
link here
I had a similar issue just now. All of my buddypress pages (register, activate, members, etc.) were giving me a 404 error. I now have all the pages displaying correctly.
EXPERIENCE
I'm using an amazon EC2 instance, with apache2. My buddypress was version 2.2.1 on wordpress 4.1.1.
My first guess was that the URL wasn't rewriting correctly, so I tried all of the options in settings > permalinks.
Each time I reloaded the page I was trying to access and confirmed that my .htaccess file was being rewritten accordingly.
(.htaccess is in the base directory of your wordpress installation. If it isn't being rewritten by saving wordpress' permalinks options, try chmod-ing the permissions: http://codex.wordpress.org/Changing_File_Permissions).
SOLUTION
I found a solution through the permalinks page of the wordpress codex:
http://codex.wordpress.org/Using_Permalinks
There is an option is a file called httpd.conf on my system that disabled the rewrite module in my .htaccess file. (On a linux system this should be in /etc/httpd/conf. On OSX it should be in /etc/apache2.)
By changing my webserver directory AllowOverride option from None to All, the .htaccess file was able to function properly. Again, I found a line in the section of my httpd.conf file that read:
AllowOverride None
and changed it to:
AllowOverride All
Hope this helps.
Try going to settings/permalinks, and just save them again. Often this resolved 'page not found' errors.

Expression Engine Site hacked - Locate redirect

I have an Expression Engine website of I try to clean up. The database has been given many new users so it seems the database has been hacked / links added. One mayor issue is that the site when clicked in Google is being bypassed. All visitors are being redirected to another website. Here is the search : http://tinyurl.com/72nzutj . First site is the one in question.. The site they are redirected to is http://sweepstakesandcontestsinfo.com/nl-in.php?nnn=555
I have been trying to find this redirect in all files and the database, but I have had no luck. It is not a .htaccess redirect, that I have checked and confirmed. But I have not been able to locate a JScript or PHP redirect in the files nor database as of yet.. Probably well hidden because of a base64 or packed encryption. Ideas?
NB no clean database version available
The redirects are happening from a compromise to your site's .htaccess file, and are only affecting clickthrus from popular search engines. Accessing the site directly has no effect, and helps keep the malware from being detected.
Look for the following code in your site's directory and remove it:
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteOptions inherit
RewriteCond %{HTTP_REFERER} .*(msn|live|altavista|excite|ask|aol|google|mail|bing|yahoo).*$ [NC]
RewriteRule .* http://sweepstakesandcontestsinfo.com/nl-in.php?nnn=555 [R,L]
</IfModule>
You may need to view "hidden files" in your FTP client or use ls -al from the command line to view your .htaccess file.
After you've got the problem fixed, you'll want to make sure you're running the most recent version of ExpressionEngine (EE 1.7.1 or EE 2.3.1 as of this writing), as well as any third-party Add-Ons.
Auditing your server's access_logs may help identify the vulnerability that led to the compromise, and looking at the modification timestamp on the files in your website directory.
A variant of this attack has already affected many WordPress installations, whereby a tiny base64_encoded JavaScript snippet was added just before the closing </body> tag, which lead to visitors being served a malware-infected Adobe Flash Player download.
Ask your web host. It seems that incoming visitors with a referrer other than the site are redirected but pasting your website (no referrer) directly into the location bar works.
This question is better off at ServerFault or ITSecurity.

Joomla installation of plug-ins

How & where to change fix upload permitions for joomla.
After installation of the plugin or module, i have no rights to edit file/directory.
thnx
You need to either enable the FTP layer and put in your username and password so that Joomla can create new directories with the proper permissions or you need to get a host that runs PHP as a CGI. The latter is preferable as the FTP layer is considered a security risk.
By default, Joomla will try to fix the permissions of files and directories during the install process, but it is not always successful depending on the server configuration. One of these 2 methods should fix your issue with future installs.