WordPress.org

Ready to get started?Download WordPress

Forums

[resolved] wp-admin does not allow me to log in (2 posts)

  1. Fronzbot
    Member
    Posted 4 years ago #

    Hi guys, my friend and I recently just posted our site, http://mobius-comics.com and had it working fine last night. This morning I decided I wanted to try to change something and go to logon in wp-admin (the directory is site/wordpress/wp-admin and yes, the files are in the correct place) and it gave me this login screen. Last time this happened was when we changed the settings for where wordpress is located and had to manually fix it in phpMyAdmin but that is not the case this time. I have tried every fix I could find online from editing wp-config.php to replacing wp-login.php to editing .htaccess to moving the entire wordpress directory and absolutely nothing seems to work. The weird thing is that my friend was logged into wp-admin all night and so we know it is working fine (I was navigating through it and even changed some stuff successfully). The problem seems to be with wp-login.php but I have no clue what is going on.

    Here is wp-config.php:

    <?php
    /**
     * The base configurations of the WordPress.
     *
     * This file has the following configurations: MySQL settings, Table Prefix,
     * Secret Keys, WordPress Language, and ABSPATH. You can find more information by
     * visiting {@link http://codex.wordpress.org/Editing_wp-config.php Editing
     * wp-config.php} Codex page. You can get the MySQL settings from your web host.
     *
     * This file is used by the wp-config.php creation script during the
     * installation. You don't have to use the web site, you can just copy this file
     * to "wp-config.php" and fill in the values.
     *
     * @package WordPress
     */
    
    // ** MySQL settings - You can get this info from your web host ** //
    /** The name of the database for WordPress */
    define('DB_NAME', 'wp');
    
    /** MySQL database username */
    define('DB_USER', '*********');
    
    /** MySQL database password */
    define('DB_PASSWORD', '************');
    
    /** MySQL hostname */
    define('DB_HOST', 'localhost');
    
    /** Database Charset to use in creating database tables. */
    define('DB_CHARSET', 'utf8');
    
    /** The Database Collate type. Don't change this if in doubt. */
    define('DB_COLLATE', '');
    
    /**#@+
     * Authentication Unique Keys.
     *
     * Change these to different unique phrases!
     * You can generate these using the {@link https://api.wordpress.org/secret-key/1.1/ WordPress.org secret-key service}
     * You can change these at any point in time to invalidate all existing cookies. This will force all users to have to log in again.
     *
     * @since 2.6.0
     */
    define('AUTH_KEY', 'put your unique phrase here');
    define('SECURE_AUTH_KEY', 'put your unique phrase here');
    define('LOGGED_IN_KEY', 'put your unique phrase here');
    define('NONCE_KEY', 'put your unique phrase here');
    /**#@-*/
    
    /**
     * WordPress Database Table prefix.
     *
     * You can have multiple installations in one database if you give each a unique
     * prefix. Only numbers, letters, and underscores please!
     */
    $table_prefix  = 'wp_';
    
    /**
     * WordPress Localized Language, defaults to English.
     *
     * Change this to localize WordPress.  A corresponding MO file for the chosen
     * language must be installed to wp-content/languages. For example, install
     * de.mo to wp-content/languages and set WPLANG to 'de' to enable German
     * language support.
     */
    define ('WPLANG', '');
    
    /* That's all, stop editing! Happy blogging. */
    
    /** WordPress absolute path to the WordPress directory. */
    if ( !defined('ABSPATH') )
    	define('ABSPATH', dirname(__FILE__) . '/');
    
    /** Sets up WordPress vars and included files. */
    require_once(ABSPATH . 'wp-settings.php');

    And wp-login.php:

    <?php
    require(dirname(__FILE__) . '/wp-config.php');
    
    if (!function_exists('add_magic_quotes')) {
    	function add_magic_quotes($array) {
    		foreach ($array as $k => $v) {
    			if (is_array($v)) {
    				$array[$k] = add_magic_quotes($v);
    			} else {
    				$array[$k] = addslashes($v);
    			}
    		}
    		return $array;
    	}
    }
    
    if (!get_magic_quotes_gpc()) {
    	$_GET    = add_magic_quotes($_GET);
    	$_POST   = add_magic_quotes($_POST);
    	$_COOKIE = add_magic_quotes($_COOKIE);
    }
    
    $wpvarstoreset = array('action','mode','error','text','popupurl','popuptitle');
    
    for ($i = 0; $i < count($wpvarstoreset); $i = $i + 1) {
    	$wpvar = $wpvarstoreset[$i];
    	if (!isset($wpvar)) {
    		if (empty($_POST["$wpvar"])) {
    			if (empty($_GET["$wpvar"])) {
    				$wpvar = '';
    			} else {
    				$wpvar = $_GET["$wpvar"];
    			}
    		} else {
    			$wpvar = $_POST["$wpvar"];
    		}
    	}
    }
    switch($action) {
    
    case 'logout':
    
        setcookie('wordpressuser_'.$cookiehash, " ", time() - 31536000, $COOKIEPATH);
        setcookie('wordpresspass_'.$cookiehash, " ", time() - 31536000, $COOKIEPATH);
    	header('Expires: Wed, 11 Jan 1984 05:00:00 GMT');
    	header('Last-Modified: ' . gmdate('D, d M Y H:i:s') . ' GMT');
    	header('Cache-Control: no-cache, must-revalidate');
    	header('Pragma: no-cache');
    	if ($is_IIS) {
    		header('Refresh: 0;url=wp-login.php');
    	} else {
    		header('Location: wp-login.php');
    	}
    	exit();
    
    break;
    
    case 'login':
    
    	if(!empty($_POST)) {
    		$log = $_POST['log'];
    		$pwd = $_POST['pwd'];
    		$redirect_to = $_POST['redirect_to'];
    	}
    
    	$user = get_userdatabylogin($log);
    
    	if (0 == $user->user_level) {
    		$redirect_to = get_settings('siteurl') . '/wp-admin/profile.php';
    	}
    
    	function login() {
    		global $wpdb, $log, $pwd, $error, $user_ID;
    		global $tableusers, $pass_is_md5;
    		if (!$log) {
    			$error = __('<strong>Error</strong>: the login field is empty.');
    			return false;
    		}
    
    		if (!$pwd) {
    			$error = __('<strong>Error</strong>: the password field is empty.');
    			return false;
    		}
    		$user_login = &$log;
    		$pwd = md5($pwd);
    		$password = &$pwd;
            //echo "log=$log: md5=$pwd: login=$user_login; password=$password";
    
    		$query = "SELECT ID, user_login, user_pass FROM $tableusers WHERE user_login = '$user_login' AND user_pass = '$password'";
    
    		$login = $wpdb->get_row($query);
    
    		if (!$login) {
    			$error = __('<strong>Error</strong>: wrong login or password.');
    			$pwd = '';
    			return false;
    		} else {
    		$user_ID = $login->ID;
    			if (($pass_is_md5 == 0 && $login->user_login == $user_login && $login->user_pass == $password) || ($pass_is_md5 == 1 && $login->user_login == $user_login && $login->user_pass == md5($password))) {
    				return true;
    			} else {
    				$error = __('<strong>Error</strong>: wrong login or password.');
    				$pwd = '';
    			return false;
    			}
    		}
    	}
    
    	if (!login()) {
            //echo $error;
    		header('Expires: Wed, 11 Jan 1984 05:00:00 GMT');
    		header('Last-Modified: ' . gmdate('D, d M Y H:i:s') . ' GMT');
    		header('Cache-Control: no-cache, must-revalidate');
    		header('Pragma: no-cache');
    	 if ($is_IIS) {
    		header('Refresh: 0;url=wp-login.php?error='.$error);
    	 } else {
    	 	header('Location: wp-login.php?error='.$error);
    	 }
    		exit();
    	} else {
    		$user_login = $log;
    		$user_pass = $pwd;
            //echo "user_login=$user_login: user_pass=$user_pass";
    		setcookie('wordpressuser_'.$cookiehash, $user_login, time() + 31536000, $COOKIEPATH);
    		setcookie('wordpresspass_'.$cookiehash, md5($user_pass), time() + 31536000, $COOKIEPATH);
    
    		header('Expires: Wed, 11 Jan 1984 05:00:00 GMT');
    		header('Last-Modified: ' . gmdate('D, d M Y H:i:s') . ' GMT');
    		header('Cache-Control: no-cache, must-revalidate');
    		header('Pragma: no-cache');
    
    		switch($mode) {
    			case 'bookmarklet':
    				$location = "wp-admin/bookmarklet.php?text=$text&popupurl=$popupurl&popuptitle=$popuptitle";
    				break;
    			case 'sidebar':
    				$location = "wp-admin/sidebar.php?text=$text&popupurl=$popupurl&popuptitle=$popuptitle";
    				break;
    			case 'profile':
    				$location = "wp-admin/profile.php?text=$text&popupurl=$popupurl&popuptitle=$popuptitle";
    				break;
    			default:
    				$location = "$redirect_to";
    				break;
    		}
    		if ($is_IIS) {
    			header("Refresh: 0;url=$location");
    		} else {
    			header("Location: $location");
    		}
    	}
    
    break;
    
    case 'lostpassword':
    
    	?>
    
    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
    <html xmlns="http://www.w3.org/1999/xhtml">
    <head>
    	<title><?php _e('WordPress &raquo; Lost password ?') ?></title>
    	<meta http-equiv="Content-Type" content="text/html; charset=<?php echo get_settings('blog_charset'); ?>" />
    	<link rel="stylesheet" href="<?php echo get_settings('siteurl'); ?>/wp-admin/wp-admin.css" type="text/css" />
    	<script type="text/javascript">
    	function focusit() {
    		// focus on first input field
    		document.lostpass.user_login.focus();
    	}
    	window.onload = focusit;
    	</script>
    </head>
    <body>
    
    <div id="login">
    <p><?php _e('Please enter your information here. We will send you a new password.') ?> </p>
    
    <?php
    if ($error) echo "<div align=\"right\" style=\"padding:4px;\"><font color=\"#FF0000\">$error</font><br />&nbsp;</div>";
    ?>
    
    <form name="" action="wp-login.php" method="post" id="lostpass">
    <input type="hidden" name="action" value="retrievepassword" />
    <label><?php _e('Login:') ?> <input type="text" name="user_login" id="user_login" value="" size="12" /></label><br />
    <label><?php _e('Email:') ?> <input type="text" name="email" id="email" value="" size="12" /></label><br />
    
    <input type="submit" name="Submit2" value="OK" class="search">
    
    </form>
    </div>
    
    </body>
    </html>
    	<?php
    
    break;
    
    case 'retrievepassword':
    
    	$user_login = $_POST["user_login"];
    	$user_data = get_userdatabylogin($user_login);
    	// redefining user_login ensures we return the right case in the email
    	$user_login = $user_data->user_login;
    	$user_email = $user_data->user_email;
    
    	if (!$user_email || $user_email != $_POST['email']) die(sprintf(__('Sorry, that user does not seem to exist in our database. Perhaps you have the wrong username or email address? <a href="%s">Try again</a>.'), 'wp-login.php?action=lostpassword'));
     	// Generate something random for a password... md5'ing current time with a rand salt
        $user_pass = substr((MD5("time" . rand(1,16000))), 0, 6);
     	// now insert the new pass md5'd into the db
     	$wpdb->query("UPDATE $tableusers SET user_pass = MD5('$user_pass') WHERE user_login = '$user_login'");
    	$message  = "Login: $user_login\r\n";
    	$message .= "Password: $user_pass\r\n";
    	$message .= 'Login at: ' . get_settings('siteurl') . '/wp-login.php';
    
    	$m = mail($user_email, '[' . get_settings('blogname') . "] Your weblog's login/password", $message);
    
    	if ($m == false) {
    		echo "<p>The email could not be sent.<br />\n";
    		echo "Possible reason: your host may have disabled the mail() function...</p>";
    		die();
    	} else {
    		echo "<p>The email was sent successfully to $user_login's email address.<br />
    		<a href='wp-login.php' title='Check your email first, of course'>Click here to login!</a></p>";
    		// send a copy of password change notification to the admin
    		mail(get_settings('admin_email'), '[' . get_settings('blogname') . "] Password Lost/Change", "Password Lost and Changed for user: $user_login");
    		die();
    	}
    
    break;
    
    default:
    
    	if((!empty($_COOKIE['wordpressuser_'.$cookiehash])) && (!empty($_COOKIE['wordpresspass_'.$cookiehash]))) {
    		$user_login = $_COOKIE['wordpressuser_'.$cookiehash];
    		$user_pass_md5 = $_COOKIE['wordpresspass_'.$cookiehash];
    	}
    
    	function checklogin() {
    		global $user_login, $user_pass_md5, $user_ID;
    
    		$userdata = get_userdatabylogin($user_login);
    
    		if ($user_pass_md5 != md5($userdata->user_pass)) {
    			return false;
    		} else {
    			return true;
    		}
    	} 
    
    	if ( !(checklogin()) ) {
    		if (!empty($_COOKIE['wordpressuser_'.$cookiehash])) {
    			$error="Error: wrong login/password"; //, or your session has expired.";
    		}
    	} else {
    		header("Expires: Wed, 5 Jun 1979 23:41:00 GMT"); /* private joke: this is Michel's birthdate - though officially it's on the 6th, since he's GMT+1 :) */
    		header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT"); /* different all the time */
    		header("Cache-Control: no-cache, must-revalidate"); /* to cope with HTTP/1.1 */
    		header("Pragma: no-cache");
    		header("Location: wp-admin/");
    		exit();
    	}
    	?>
    
    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
    <html xmlns="http://www.w3.org/1999/xhtml">
    <head>
    	<title><?php printf(__('WordPress > %s > Login form'), get_settings('blogname')) ?></title>
    	<meta http-equiv="Content-Type" content="text/html; charset=<?php echo get_settings('blog_charset'); ?>" />
    	<link rel="stylesheet" href="<?php echo get_settings('siteurl'); ?>/wp-admin/wp-admin.css" type="text/css" />
    	<script type="text/javascript">
    	function focusit() {
    		// focus on first input field
    		document.loginform.log.focus();
    	}
    	window.onload = focusit;
    	</script>
    </head>
    <body>
    
    <div id="login">
    <p>
    	<a href="<?php echo get_settings('home'); ?>" title="<?php _e('Are you lost?') ?>"><?php _e('Back to blog?') ?></a><br />
    
    <?php if (get_settings('users_can_register')) { ?>
    	<a href="<?php echo get_settings('siteurl'); ?>/wp-register.php" title="<?php _e('Register to be an author') ?>"><?php _e('Register?') ?></a><br />
    <?php } ?>
    	<a href="<?php echo get_settings('siteurl'); ?>/wp-login.php?action=lostpassword" title="<?php _e('Password Lost and Found') ?>"><?php _e('Lost your password?') ?></a>
    </p>
    
    <?php
    if ($error) echo "<div align=\"right\" style=\"padding:4px;\"><font color=\"#FF0000\">$error</font><br />&nbsp;</div>";
    ?>
    
    <form name="login" id="loginform" action="wp-login.php" method="post">
    <?php if ($mode=="bookmarklet") { ?>
    	<input type="hidden" name="mode" value="<?php echo $mode ?>" />
    	<input type="hidden" name="text" value="<?php echo $text ?>" />
    	<input type="hidden" name="popupurl" value="<?php echo $popupurl ?>" />
    	<input type="hidden" name="popuptitle" value="<?php echo $popuptitle ?>" />
    <?php } ?>
    <?php if (isset($_GET["redirect_to"])) { ?>
    	<input type="hidden" name="redirect_to" value="<?php echo $_GET["redirect_to"] ?>" />
    <?php } else { ?>
    	<input type="hidden" name="redirect_to" value="wp-admin/" />
    <?php } ?>
    	<input type="hidden" name="action" value="login" />
    	<label><?php _e('Login:') ?> <input type="text" name="log" id="log" value="" size="20" tabindex="1" /></label><br />
    	<label><?php _e('Password:') ?> <input type="password" name="pwd" value="" size="20" tabindex="2" /></label><br />
    	<input type="submit" name="Submit2" value="OK" class="search" tabindex="3" />
    
    </form>
    
    </div>
    
    </body>
    </html>
    <?php
    
    break;
    } // end action switch
    ?>

    Please help!!

  2. Fronzbot
    Member
    Posted 4 years ago #

    Ok, wow, I had to delete all the wordpress files and reupload them. Only thing I didn't delete was the wp-content folder.

    Lame.

Topic Closed

This topic has been closed to new replies.

About this Topic