How do I fix this error?

[fum1n]

Lately allot of the time I'm trying to do admin functions I get a VERY ANNOYING BOX what says "To continue this action, login using the admin account that initiated the action." what makes me login again and sometimes it just continuously makes me login again and again until I just go back in my browser.

any help would be greatly appreciated

ps I'm running vBulletin 3.7.3 Patch Level 1

[Dismounted]

You can disable this feature. Admin CP > vBulletin Options (General Options, I think).

[fum1n]

I disabled the option you suggested however I still get the prompt to login on like 1/3 admin actions I do and 1/5 it will just continuously make me login until I just close the page and re open it.

Here's a picture of what it says:
http://img120.imageshack.us/my.php?image=sasasaskw2.jpg

[mholtum]

sounds like a cookie issue.

[Dismounted]

I thought you meant inline moderation. In this case, it looks like a cookie issue (as above poster mentioned). Check your cookie domain/path settings.

[fum1n]

sounds like a cookie issue.Any suggestions on what configurations to change? I cleared my cookies+cache+saved pass's, and changed my forums cookie path to /forum/, still getting it.

[mholtum]

vboptions = Cookies and HTTP Header Options = Cookie Domain =

I have .ravensrealm.net (use .project-7.net) under suggested settings and custom settings is blank.

That is what I am using. Your millage may vary. See if that helps.

[fum1n]

Still having same issue

[mholtum]

Clear your browser cache and see.. Not sure what else it might be.. Let me dig around in my settings see if I can come up with something else..

[lazydesis]

i have same exact error :(

i know its not browser cache because another admin also got same error and he is in another part of the world.

the message that pops up is "To continue this action, login using the admin account that initiated the action" and gives a login box and its completely random.

Sometimes when I click Submit button in admincp for any option it completes successfully. At other times it throws me the error with the login box and I enter my admin user/pass and it then completes the initial submit task successfully .. or otherwise it brings me back to the same login box again with same error ... and some times this process can go on for 10-15 times before it actually submits ..

its very very annoying

[mholtum]

I have tried many times to duplicate this and can't. Sorry. Try upgrading from 3.7.3 to 3.7.5, you never know. It may fix it.

[lazydesis]

I removed the following code


else if ($_POST['do'] AND ADMINHASH != $vbulletin->GPC['adminhash'])
{
print_cp_login(true);
}


from the file admincp/global.php

Now I do not get the error. I am sure that code is there for something important. Can someone explain to me the implications of removing that bit of code from the admincp/global.php ?

Thanks.

--------------- Added 1231461540 at 1231461540 ---------------

by the way I updated to 3.8 gold today and still got the problem, after which i removed that code.

[Bellardia]

Fixed in post below.

[lazydesis]

It still asks me to login when I try to go to the admincp. Only members of the administrator group are able to login even after removing the code.

Bellardia could you please explain what you mean by "forging as an admin"

Thanks.

[Bellardia]

Let me try to rephrase that.
When you submit a post form to admincp it will verify that it was generated from inside the admincp by sending along ADMINHASH as well. Now it won't check to see if the adminhash was sent along as well, so using php or javascript someone could possibly abuse this fact to make you query the admin cp by directing you to a certain page such as www.yourforum.com/forum/admin.cp?do=DeleteAllUsers (although this isn't a real function, its an example) without you knowing, pretty much using your access to the admincp to do whatever they want through you.

[lazydesis]

oh I see .. thanks for explaining.

I hope some one could come up with a better solution to the problem

[Bellardia]

In the mean time I'd advise you put that back in...although logging in can be a pain, by doing something as simple as posting an image to your forum I could make myself an admin..

[Lynne]

Have you tried to see if you have this problem with a default skin? Or with plugins disabled?

Create a new style with no parent - Styles & Templates > Style Manager > Add New Style > no parent - then browse the site using that totally default vbulletin style - do you still have the same problem?

If it is still happening, then try disabling your plugins and see if you still have this problem.
Note: To temporarily disable the plugin system, edit config.php and add this line right under <?php

define('DISABLE_HOOKS', true);

[lazydesis]

Have you tried to see if you have this problem with a default skin? Or with plugins disabled?

Create a new style with no parent - Styles & Templates > Style Manager > Add New Style > no parent - then browse the site using that totally default vbulletin style - do you still have the same problem?

If it is still happening, then try disabling your plugins and see if you still have this problem.
Note: To temporarily disable the plugin system, edit config.php and add this line right under <?php

define('DISABLE_HOOKS', true);

Just to let you know, it does not happen while browsing the site. Its only when hitting submit buttons in the admincp ... and its very random as to when it appears or what buttons need to be hit.

[Bellardia]

It would appear that something is compromising your ADMINHASH variable, or that it isn't being parsed correctly (although it is defined so it seems odd).

[lazydesis]

is there anything i can do to clear the cache of the admincp anywhere? I am sorry but I don't even know if there is something like cache for the admincp ..

I tried clearing the frontend cache by going to Maintenance>Update Counters>Clear post cache, clear signature cache

but this didn't help.

[Dismounted]

Have you tried disabling all your plugins (how to do that is in Lynne's post)?

[Marco van Herwaarden]

If this happens with all modifications disabled using default files and admincp style, tehn please either post on vB.com or open a support ticket.

[vidan]

YES! it happened to me as well. since i upgrade to 3.8rc until 3.8.1
*it happened only in admincp*
Please fix this problem, i thought this might be not the plugin / product issue, but the version itself. thanks