Admin Profiles (for v1.3.x only!) Support Thread

OK, I have to have all 7 carts done and all products loaded before beginning of business Monday. So I guess I am going to have to hack at this myself rather than just wait around and see if anyone answers.

I re-uploaded all the files to the admin folder overwriting what is there. Upon logging in I have the menu boxes back, but it is partially broke. I am getting this:

Configuration | Catalog | Modules | Customers | Locations / Taxes | Localization | Reports|$options = array( array('box' => BOX_TOOLS_IMAGE_HANDLER, 'page' => FILENAME_IMAGE_HANDLER) ); Tools | Gift Certificate/Coupons |$options = array( array('box' => BOX_TOOLS_IMAGE_HANDLER, 'page' => FILENAME_IMAGE_HANDLER) ); Extras |

I was able to go into the permissions screen and my admin login had permission to everything except Image Handler (it was reset as I set the permission on it to earlier). I also changed the admin level for the second admin account to 1. All of the second admin account's permissions were off, so I turned some on.

Now I have to figure out why some of the menu items are showing code rather than menus.

UPDATE:

OK, So in looking carefully at the text I highlighted in red I saw it was referring to the Image Handler. I then thought "Hmm, that is the extra box file I edited" so I checked the file and found the text in red was outside the ending php tag. It was also in the same location, at the end of the file beyond the ending "?>" on the product_music_extras_dhtml file. I don't know how they got there, but I seem to be back in business.

I am just a little nervous about adding the other admin users now. However, I have a local copy of all files in the renamed admin folder, so I can do this again if I need to. I wish I knew what happened, and how that extra text got there.

typo i think... :D

Yea, except I just added another new admin user. As soon as I hit submit it DID IT AGAIN!!

I don't know what is going on, but re-uploading my entire admin folder, and resetting all the permissions for every admin user every time I add a new admin user is going to get old VERY FAST.

Any ideas on why this could be happening?

I just downloaded the contribution and installed it on a fresh v1.3.0.2 install to test it.
I started with one user, ID=1, admin-level=1.

Inserted a new user... filled in the name, email, level=1... clicked Save.
No error. New user shows up in list.
Click on the orange P to edit permissions... set them as desired.

Not sure how to help you further. :(

DrByte:

I just downloaded the contribution and installed it on a fresh v1.3.0.2 install to test it.
I started with one user, ID=1, admin-level=1.

Inserted a new user... filled in the name, email, level=1... clicked Save.
No error. New user shows up in list.
Click on the orange P to edit permissions... set them as desired.

Not sure how to help you further. :(

I am not sure what is broke either, but something is. I am working in a Linux environment on my workstation, but that should not make any difference. It does have one big issue though - gFTP SUCKS and in lieu of a good FTP Client I am using a Linux nightly build of FileZilla. It does not seem to want to remember that I said overwrite all and wants to confirm for every file. Thank goodness my host lets me have SSH access to a shell so I can "rm -R *" in my admin directory first and just do a fresh upload.

------- :down: ------- :down: -------

Uh, oh - It seems the upload did not fix it this time. I have no access to anything and I have no menus again. Clearing out the admin folder and uploading files that I know work, because they are the same ones I uploaded to fix it last time, is not giving me access now. I think I am going to cry. :censored:

Since you're reloading your admin files ... why not load them up without the Admin Profiles code installed.

Then create your new admin users.

Then install the Admin Profiles code and set the permissions on your users.

DrByte:

Since you're reloading your admin files ... why not load them up without the Admin Profiles code installed.

Then create your new admin users.

Then install the Admin Profiles code and set the permissions on your users.

Actually, I just realized that you seem to have uploaded a version 1.0.4 and the one I have having issues with is version 1.0.3 uploaded by kuroi. I don't have the files without the Admin Profiles code with my style-sheet and logo, only the originals from the download. I also don't remember what customizations I did to the admin, but I am pretty sure it was only color changes (CSS) the top left logo, and powered by logo at the bottom of the page. So I think I will just dump the files in the admin folder and put the originals back, but what about the database? DUH! Never mind I was actually smart and I did a database backup right before I installed this mod. So can I just run a database restore from cPanel, or will new database tables and entries still be there if I do that? How do I go about getting my database clean again so I can reapply the new version of the mod?

The extra code outside the php tags = FTP problem - no question. I've seen that once before.

However the getting locked out has all the hallmarks of a bug in Zen Cart itself, specifically a tendancy to change admin user when register_globals is ON. This appears to cause the following behaviour: when a new user is created, the user ID of the current user is set to that of the new user. It's not a problem with Admin Profiles, does it rather highglight it.

If register_global is ON, can you set it to OFF? If not, I have a possible (untested) workaround.

On re-reading your posts, another very real possibility is that your copy of the admin/includes/init_includes/init_admin_auth.php file, which excludes some key admin pages from being blocked by Admin Profiles, may be somehow corrupted.

I am in the process of uploading the files for the admin folder now. As soon as it is done and I have access to the admin back-end again I will run the info.php tool that is built in. Normally I have that file (under some cryptic name) on my host anyhow, but I did not put it in this one because ZenCart has it built in. Then I can check the register_globals option.

As far as turning it off, I am not sure. I think I can override the php.ini file, will that do it? I will have to look at my host's help files to be sure how it is done, but I have seen mention of php.ini files with user setting in the host's support forums.

In a local environment changing the php.ini file works fine. In a hosted environment, I believe it depends upon how the host has set things up (cue: Dr Byte, who is rather more expert in this area than me).

kuroi:

In a local environment changing the php.ini file works fine. In a hosted environment, I believe it depends upon how the host has set things up (cue: Dr Byte, who is rather more expert in this area than me).
php.ini or .htaccess

Documented here:
http://www.zen-cart.com/wiki/index.php/Troubleshoot_-_Installation

DrByte:

php.ini or .htaccess

Documented here:
http://www.zen-cart.com/wiki/index.php/Troubleshoot_-_Installation

My host is running php as cgi under phpsuexec, so it would be php.ini. Also it seems I will be needing to add it to every folder, as it effects on a per folder basis. Also, I have yet to confirm (files are still uploading) but I do believe that my host does have register_globals on by default.

The files are uploaded, and I have manually copied my php.ini file to every folder in the admin tree. I hope this is enough, as I don't want to have to do it for every folder in the carting system, and I don't know how to recursivly copy a single file to every folder in a given directory tree. If you know of the bash command that would do this it would be awesome.

I am going to try the install of 1.0.4 now. I never did find out if I have to do anything about my database. I guess I will find out soon enough.

What is this extras folder in 1.0.4? It was not there before and the instructions have not changed from 1.0.3

1.0.4 isn't much different from 1.0.3 and really isn't needed if you're not using the User Tracking module.

This post contains a fix you can do to work around Register Globals = ON as Kuroi had suggested might be a problem:
http://www.zen-cart.com/forum/showthread.php?p=241836#post241836

I deleted everything in my admin folder and replaced them with the files from the download archive of the cart. I reinstalled the Image Handler mod. I manually added the php.ini file to every single directory in the admin tree. I added the php.ini file to most of the main folders for the rest of the cart (i.e. the root folder, the includes folder and sub folders, html area folder and sub folders, and all 1 level deep folders of the root folder). I confirmed register_globals is OFF.

Then I reinstalled the Admin Profiles mod following all instructions. I refreshed the admin home by clicking on the Admin Home link and . . . I am right back where I started. I have no menus and no permission to any admin page beyond index.php. :no: Now What??

Is there anything I can look for in the database with phpMyAdmin to help?

Did you re-run the "install_admin_profiles.sql" file via phpMyAdmin to reset all the admin permissions?

I note that you refreshed the admin page. Is it possible that you might still be in the same session with a wrong user ID being held as a sessional variable?

DrByte:

Did you re-run the "install_admin_profiles.sql" file via phpMyAdmin to reset all the admin permissions?
Yes

kuroi:

I note that you refreshed the admin page. Is it possible that you might still be in the same session with a wrong user ID being held as a sessional variable?
Session?? Hmm . . . Let's try logging out, ok - then back in, and . . .

I have a menu!!! :yes:

OK I only need the three admins right now, but will need more later. Just for Sh172 an Grins I deletes the rows for admins 2 and 3 in phpMyAdmin from the admin table. Let me try to re-add one of them and see what it does.

Ok the password didn't match and the validation caught it. Let's try again.

New user added!! :thumbsup:

Thank you -- Thank you -- Thank you.

I guess is was a combination of register_globals and having the same session.

You are both great, and you put up with me when I was frustrated and short tempered. I hold you both in high regards. Thank you for staying up with me tonight, now go to bed. I think I can get it from here - I think I will be calling in sick tomorrow also.

Once again thank you both.