blank login page

Viewing 15 replies - 1 through 15 (of 17 total)
1 2
  • Thread Starter inkwatu

    (@inkwatu)

    17 years, 3 months ago

    When I look at the source code for the blank page at http://inkwatu.com/wp-admin/ this is all that’s there:

    <p> </p>

    whooami

    (@whooami)

    17 years, 3 months ago

    upload a new wp-login.php from the version of wp youre using (2.5?) and as you do it, crack open the one on the server and see whats actually inside it. Im curious to know.

    Thread Starter inkwatu

    (@inkwatu)

    17 years, 3 months ago

    here’s what’s inside the current wp-login.php

    <?php
    require( dirname(__FILE__) . ‘/wp-config.php’ );

    // Rather than duplicating this HTML all over the place, we’ll stick it in function
    function login_header($title = ‘Login’, $message = ”, $wp_error = ”) {
    global $error;

    if ( empty($wp_error) )
    $wp_error = new WP_Error();
    ?>
    <!DOCTYPE html PUBLIC “-//W3C//DTD XHTML 1.0 Transitional//EN” “http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd”&gt;
    <html xmlns=”http://www.w3.org/1999/xhtml&#8221; <?php language_attributes(); ?>>
    <head>
    <title><?php bloginfo(‘name’); ?> › <?php echo $title; ?></title>
    <meta http-equiv=”Content-Type” content=”<?php bloginfo(‘html_type’); ?>; charset=<?php bloginfo(‘charset’); ?>” />
    <?php
    wp_admin_css( ‘css/login’ );
    wp_admin_css( ‘css/colors-fresh’ );
    ?>
    <script type=”text/javascript”>
    function focusit() {
    document.getElementById(‘user_login’).focus();
    }
    window.onload = focusit;
    </script>
    <?php do_action(‘login_head’); ?>
    </head>
    <body class=”login”>

    <div id=”login”><h1>” title=”<?php echo apply_filters(‘login_headertitle’, __(‘Powered by WordPress’)); ?>”><?php bloginfo(‘name’); ?></h1>
    <?php
    if ( !empty( $message ) ) echo apply_filters(‘login_message’, $message) . “\n”;

    // Incase a plugin uses $error rather than the $errors object
    if ( !empty( $error ) ) {
    $wp_error->add(‘error’, $error);
    unset($error);
    }

    if ( $wp_error->get_error_code() ) {
    $errors = ”;
    $messages = ”;
    foreach ( $wp_error->get_error_codes() as $code ) {
    $severity = $wp_error->get_error_data($code);
    foreach ( $wp_error->get_error_messages($code) as $error ) {
    if ( ‘message’ == $severity )
    $messages .= ‘ ‘ . $error . “
    \n”;
    else
    $errors .= ‘ ‘ . $error . “
    \n”;
    }
    }
    if ( !empty($errors) )
    echo ‘<div id=”login_error”>’ . apply_filters(‘login_errors’, $errors) . “</div>\n”;
    if ( !empty($messages) )
    echo ‘<p class=”message”>’ . apply_filters(‘login_messages’, $messages) . “</p>\n”;
    }
    } // End of login_header()

    function retrieve_password() {
    global $wpdb;

    $errors = new WP_Error();

    if ( empty( $_POST[‘user_login’] ) && empty( $_POST[‘user_email’] ) )
    $errors->add(’empty_username’, __(‘ERROR: Enter a username or e-mail address.’));

    if ( strstr($_POST[‘user_login’], ‘@’) ) {
    $user_data = get_user_by_email(trim($_POST[‘user_login’]));
    if ( empty($user_data) )
    $errors->add(‘invalid_email’, __(‘ERROR: There is no user registered with that email address.’));
    } else {
    $login = trim($_POST[‘user_login’]);
    $user_data = get_userdatabylogin($login);
    }

    do_action(‘lostpassword_post’);

    if ( $errors->get_error_code() )
    return $errors;

    if ( !$user_data ) {
    $errors->add(‘invalidcombo’, __(‘ERROR: Invalid username or e-mail.’));
    return $errors;
    }

    // redefining user_login ensures we return the right case in the email
    $user_login = $user_data->user_login;
    $user_email = $user_data->user_email;

    do_action(‘retreive_password’, $user_login); // Misspelled and deprecated
    do_action(‘retrieve_password’, $user_login);

    $key = $wpdb->get_var(“SELECT user_activation_key FROM $wpdb->users WHERE user_login = ‘$user_login'”);
    if ( empty($key) ) {
    // Generate something random for a key…
    $key = wp_generate_password();
    do_action(‘retrieve_password_key’, $user_login, $key);
    // Now insert the new md5 key into the db
    $wpdb->query(“UPDATE $wpdb->users SET user_activation_key = ‘$key’ WHERE user_login = ‘$user_login'”);
    }
    $message = __(‘Someone has asked to reset the password for the following site and username.’) . “\r\n\r\n”;
    $message .= get_option(‘siteurl’) . “\r\n\r\n”;
    $message .= sprintf(__(‘Username: %s’), $user_login) . “\r\n\r\n”;
    $message .= __(‘To reset your password visit the following address, otherwise just ignore this email and nothing will happen.’) . “\r\n\r\n”;
    $message .= get_option(‘siteurl’) . “/wp-login.php?action=rp&key=$key\r\n”;

    if ( !wp_mail($user_email, sprintf(__(‘[%s] Password Reset’), get_option(‘blogname’)), $message) )
    die(‘<p>’ . __(‘The e-mail could not be sent.’) . “
    \n” . __(‘Possible reason: your host may have disabled the mail() function…’) . ‘</p>’);

    return true;
    }

    function reset_password($key) {
    global $wpdb;

    $key = preg_replace(‘/[^a-z0-9]/i’, ”, $key);

    if ( empty( $key ) )
    return new WP_Error(‘invalid_key’, __(‘Invalid key’));

    $user = $wpdb->get_row(“SELECT * FROM $wpdb->users WHERE user_activation_key = ‘$key'”);
    if ( empty( $user ) )
    return new WP_Error(‘invalid_key’, __(‘Invalid key’));

    do_action(‘password_reset’, $user);

    // Generate something random for a password…
    $new_pass = wp_generate_password();
    wp_set_password($new_pass, $user->ID);
    $message = sprintf(__(‘Username: %s’), $user->user_login) . “\r\n”;
    $message .= sprintf(__(‘Password: %s’), $new_pass) . “\r\n”;
    $message .= get_option(‘siteurl’) . “/wp-login.php\r\n”;

    if ( !wp_mail($user->user_email, sprintf(__(‘[%s] Your new password’), get_option(‘blogname’)), $message) )
    die(‘<p>’ . __(‘The e-mail could not be sent.’) . “
    \n” . __(‘Possible reason: your host may have disabled the mail() function…’) . ‘</p>’);

    // send a copy of password change notification to the admin
    // but check to see if it’s the admin whose password we’re changing, and skip this
    if ( $user->user_email != get_option(‘admin_email’) ) {
    $message = sprintf(__(‘Password Lost and Changed for user: %s’), $user->user_login) . “\r\n”;
    wp_mail(get_option(‘admin_email’), sprintf(__(‘[%s] Password Lost/Changed’), get_option(‘blogname’)), $message);
    }

    return true;
    }

    function register_new_user($user_login, $user_email) {
    $errors = new WP_Error();

    $user_login = sanitize_user( $user_login );
    $user_email = apply_filters( ‘user_registration_email’, $user_email );

    // Check the username
    if ( $user_login == ” )
    $errors->add(’empty_username’, __(‘ERROR: Please enter a username.’));
    elseif ( !validate_username( $user_login ) ) {
    $errors->add(‘invalid_username’, __(‘ERROR: This username is invalid. Please enter a valid username.’));
    $user_login = ”;
    } elseif ( username_exists( $user_login ) )
    $errors->add(‘username_exists’, __(‘ERROR: This username is already registered, please choose another one.’));

    // Check the e-mail address
    if ($user_email == ”) {
    $errors->add(’empty_email’, __(‘ERROR: Please type your e-mail address.’));
    } elseif ( !is_email( $user_email ) ) {
    $errors->add(‘invalid_email’, __(‘ERROR: The email address isn’t correct.’));
    $user_email = ”;
    } elseif ( email_exists( $user_email ) )
    $errors->add(’email_exists’, __(‘ERROR: This email is already registered, please choose another one.’));

    do_action(‘register_post’, $user_login, $user_email, $errors);

    $errors = apply_filters( ‘registration_errors’, $errors );

    if ( $errors->get_error_code() )
    return $errors;

    $user_pass = wp_generate_password();
    $user_id = wp_create_user( $user_login, $user_pass, $user_email );
    if ( !$user_id ) {
    $errors->add(‘registerfail’, sprintf(__(‘ERROR: Couldn’t register you… please contact the webmaster !’), get_option(‘admin_email’)));
    return $errors;
    }

    wp_new_user_notification($user_id, $user_pass);

    return $user_id;
    }

    //
    // Main
    //

    $action = isset($_REQUEST[‘action’]) ? $_REQUEST[‘action’] : ”;
    $errors = new WP_Error();

    if ( isset($_GET[‘key’]) )
    $action = ‘resetpass’;

    nocache_headers();

    header(‘Content-Type: ‘.get_bloginfo(‘html_type’).’; charset=’.get_bloginfo(‘charset’));

    if ( defined(‘RELOCATE’) ) { // Move flag is set
    if ( isset( $_SERVER[‘PATH_INFO’] ) && ($_SERVER[‘PATH_INFO’] != $_SERVER[‘PHP_SELF’]) )
    $_SERVER[‘PHP_SELF’] = str_replace( $_SERVER[‘PATH_INFO’], ”, $_SERVER[‘PHP_SELF’] );

    $schema = ( isset($_SERVER[‘HTTPS’]) && strtolower($_SERVER[‘HTTPS’]) == ‘on’ ) ? ‘https://&#8217; : ‘http://&#8217;;
    if ( dirname($schema . $_SERVER[‘HTTP_HOST’] . $_SERVER[‘PHP_SELF’]) != get_option(‘siteurl’) )
    update_option(‘siteurl’, dirname($schema . $_SERVER[‘HTTP_HOST’] . $_SERVER[‘PHP_SELF’]) );
    }

    //Set a cookie now to see if they are supported by the browser.
    setcookie(TEST_COOKIE, ‘WP Cookie check’, 0, COOKIEPATH, COOKIE_DOMAIN);
    if ( SITECOOKIEPATH != COOKIEPATH )
    setcookie(TEST_COOKIE, ‘WP Cookie check’, 0, SITECOOKIEPATH, COOKIE_DOMAIN);

    $http_post = (‘POST’ == $_SERVER[‘REQUEST_METHOD’]);
    switch ($action) {

    case ‘logout’ :

    wp_logout();

    $redirect_to = ‘wp-login.php?loggedout=true’;
    if ( isset( $_REQUEST[‘redirect_to’] ) )
    $redirect_to = $_REQUEST[‘redirect_to’];

    wp_safe_redirect($redirect_to);
    exit();

    break;

    case ‘lostpassword’ :
    case ‘retrievepassword’ :
    if ( $http_post ) {
    $errors = retrieve_password();
    if ( !is_wp_error($errors) ) {
    wp_redirect(‘wp-login.php?checkemail=confirm’);
    exit();
    }
    }

    if ( ‘invalidkey’ == $_GET[‘error’] ) $errors->add(‘invalidkey’, __(‘Sorry, that key does not appear to be valid.’));

    do_action(‘lost_password’);
    login_header(__(‘Lost Password’), ‘<p class=”message”>’ . __(‘Please enter your username or e-mail address. You will receive a new password via e-mail.’) . ‘</p>’, $errors);
    ?>

    <form name=”lostpasswordform” id=”lostpasswordform” action=”wp-login.php?action=lostpassword” method=”post”>
    <p>
    <label><?php _e(‘Username or E-mail:’) ?>
    <input type=”text” name=”user_login” id=”user_login” class=”input” value=”<?php echo attribute_escape(stripslashes($_POST[‘user_login’])); ?>” size=”20″ tabindex=”10″ /></label>
    </p>
    <?php do_action(‘lostpassword_form’); ?>
    <p class=”submit”><input type=”submit” name=”wp-submit” id=”wp-submit” value=”<?php _e(‘Get New Password’); ?>” tabindex=”100″ /></p>
    </form>

    <p id=”nav”>
    <?php if (get_option(‘users_can_register’)) : ?>
    /wp-login.php”><?php _e(‘Log in’) ?> |
    /wp-login.php?action=register”><?php _e(‘Register’) ?>
    <?php else : ?>
    /wp-login.php”><?php _e(‘Log in’) ?>
    <?php endif; ?>
    </p>

    </div>

    <p id=”backtoblog”>/” title=”<?php _e(‘Are you lost?’) ?>”><?php printf(__(‘« Back to %s’), get_bloginfo(‘title’, ‘display’ )); ?></p>

    </body>
    </html>
    <?php
    break;

    case ‘resetpass’ :
    case ‘rp’ :
    $errors = reset_password($_GET[‘key’]);

    if ( ! is_wp_error($errors) ) {
    wp_redirect(‘wp-login.php?checkemail=newpass’);
    exit();
    }

    wp_redirect(‘wp-login.php?action=lostpassword&error=invalidkey’);
    exit();

    break;

    case ‘register’ :
    if ( !get_option(‘users_can_register’) ) {
    wp_redirect(‘wp-login.php?registration=disabled’);
    exit();
    }

    $user_login = ”;
    $user_email = ”;
    if ( $http_post ) {
    require_once( ABSPATH . WPINC . ‘/registration.php’);

    $user_login = $_POST[‘user_login’];
    $user_email = $_POST[‘user_email’];
    $errors = register_new_user($user_login, $user_email);
    if ( !is_wp_error($errors) ) {
    wp_redirect(‘wp-login.php?checkemail=registered’);
    exit();
    }
    }

    login_header(__(‘Registration Form’), ‘<p class=”message register”>’ . __(‘Register For This Site’) . ‘</p>’, $errors);
    ?>

    <form name=”registerform” id=”registerform” action=”wp-login.php?action=register” method=”post”>
    <p>
    <label><?php _e(‘Username’) ?>
    <input type=”text” name=”user_login” id=”user_login” class=”input” value=”<?php echo attribute_escape(stripslashes($user_login)); ?>” size=”20″ tabindex=”10″ /></label>
    </p>
    <p>
    <label><?php _e(‘E-mail’) ?>
    <input type=”text” name=”user_email” id=”user_email” class=”input” value=”<?php echo attribute_escape(stripslashes($user_email)); ?>” size=”25″ tabindex=”20″ /></label>
    </p>
    <?php do_action(‘register_form’); ?>
    <p id=”reg_passmail”><?php _e(‘A password will be e-mailed to you.’) ?></p>
    <p class=”submit”><input type=”submit” name=”wp-submit” id=”wp-submit” value=”<?php _e(‘Register’); ?>” tabindex=”100″ /></p>
    </form>

    <p id=”nav”>
    /wp-login.php”><?php _e(‘Log in’) ?> |
    /wp-login.php?action=lostpassword” title=”<?php _e(‘Password Lost and Found’) ?>”><?php _e(‘Lost your password?’) ?>
    </p>

    </div>

    <p id=”backtoblog”>/” title=”<?php _e(‘Are you lost?’) ?>”><?php printf(__(‘« Back to %s’), get_bloginfo(‘title’, ‘display’ )); ?></p>

    </body>
    </html>
    <?php
    break;

    case ‘login’ :
    default:
    if ( isset( $_REQUEST[‘redirect_to’] ) )
    $redirect_to = $_REQUEST[‘redirect_to’];
    else
    $redirect_to = ‘wp-admin/’;

    $user = wp_signon();

    if ( !is_wp_error($user) ) {
    // If the user can’t edit posts, send them to their profile.
    if ( !$user->has_cap(‘edit_posts’) && ( empty( $redirect_to ) || $redirect_to == ‘wp-admin/’ ) )
    $redirect_to = get_option(‘siteurl’) . ‘/wp-admin/profile.php’;
    wp_safe_redirect($redirect_to);
    exit();
    }

    $errors = $user;
    // Clear errors if loggedout is set.
    if ( !empty($_GET[‘loggedout’]) )
    $errors = new WP_Error();

    // If cookies are disabled we can’t log in even with a valid user+pass
    if ( isset($_POST[‘testcookie’]) && empty($_COOKIE[TEST_COOKIE]) )
    $errors->add(‘test_cookie’, __(“ERROR: Cookies are blocked or not supported by your browser. You must enable cookies to use WordPress.”));

    // Some parts of this script use the main login form to display a message
    if ( isset($_GET[‘loggedout’]) && TRUE == $_GET[‘loggedout’] ) $errors->add(‘loggedout’, __(‘You are now logged out.’), ‘message’);
    elseif ( isset($_GET[‘registration’]) && ‘disabled’ == $_GET[‘registration’] ) $errors->add(‘registerdiabled’, __(‘User registration is currently not allowed.’));
    elseif ( isset($_GET[‘checkemail’]) && ‘confirm’ == $_GET[‘checkemail’] ) $errors->add(‘confirm’, __(‘Check your e-mail for the confirmation link.’), ‘message’);
    elseif ( isset($_GET[‘checkemail’]) && ‘newpass’ == $_GET[‘checkemail’] ) $errors->add(‘newpass’, __(‘Check your e-mail for your new password.’), ‘message’);
    elseif ( isset($_GET[‘checkemail’]) && ‘registered’ == $_GET[‘checkemail’] ) $errors->add(‘registered’, __(‘Registration complete. Please check your e-mail.’), ‘message’);

    login_header(__(‘Login’), ”, $errors);
    ?>

    <form name=”loginform” id=”loginform” action=”wp-login.php” method=”post”>
    <?php if ( !isset($_GET[‘checkemail’]) || !in_array( $_GET[‘checkemail’], array(‘confirm’, ‘newpass’) ) ) : ?>
    <p>
    <label><?php _e(‘Username’) ?>
    <input type=”text” name=”log” id=”user_login” class=”input” value=”<?php echo attribute_escape(stripslashes($user_login)); ?>” size=”20″ tabindex=”10″ /></label>
    </p>
    <p>
    <label><?php _e(‘Password’) ?>
    <input type=”password” name=”pwd” id=”user_pass” class=”input” value=”” size=”20″ tabindex=”20″ /></label>
    </p>
    <?php do_action(‘login_form’); ?>
    <p class=”forgetmenot”><label><input name=”rememberme” type=”checkbox” id=”rememberme” value=”forever” tabindex=”90″ /> <?php _e(‘Remember Me’); ?></label></p>
    <p class=”submit”>
    <input type=”submit” name=”wp-submit” id=”wp-submit” value=”<?php _e(‘Log In’); ?>” tabindex=”100″ />
    <input type=”hidden” name=”redirect_to” value=”<?php echo attribute_escape($redirect_to); ?>” />
    <input type=”hidden” name=”testcookie” value=”1″ />
    </p>
    <?php else : ?>
    <p> </p>
    <?php endif; ?>
    </form>

    <p id=”nav”>
    <?php if ( isset($_GET[‘checkemail’]) && in_array( $_GET[‘checkemail’], array(‘confirm’, ‘newpass’) ) ) : ?>
    <?php elseif (get_option(‘users_can_register’)) : ?>
    /wp-login.php?action=register”><?php _e(‘Register’) ?> |
    /wp-login.php?action=lostpassword” title=”<?php _e(‘Password Lost and Found’) ?>”><?php _e(‘Lost your password?’) ?>
    <?php else : ?>
    /wp-login.php?action=lostpassword” title=”<?php _e(‘Password Lost and Found’) ?>”><?php _e(‘Lost your password?’) ?>
    <?php endif; ?>
    </p>

    </div>

    <p id=”backtoblog”>/” title=”<?php _e(‘Are you lost?’) ?>”><?php printf(__(‘« Back to %s’), get_bloginfo(‘title’, ‘display’ )); ?></p>

    </body>
    </html>
    <?php

    break;
    } // end action switch
    ?>

    whooami

    (@whooami)

    17 years, 3 months ago

    interesting, click this:

    http://inkwatu.com/wp-admin/wp-login.php

    where do you go?

    what do your server logs say?

    Thread Starter inkwatu

    (@inkwatu)

    17 years, 3 months ago

    I replaced the old wp-login.php with the original one and there’s no change in the behavior. Still get the completely blank page.

    Thread Starter inkwatu

    (@inkwatu)

    17 years, 3 months ago

    Thanks for helping. I’m in a panic.

    whooami

    (@whooami)

    17 years, 3 months ago

    lol dont panic. where are you hosted?

    whooami

    (@whooami)

    17 years, 3 months ago

    ok, take a look at this:

    http://inkwatu.com/wp-admin/wp-register.php

    now, once the front of your site loads, view that source. look familiar? see what I see?

    Thread Starter inkwatu

    (@inkwatu)

    17 years, 3 months ago

    What I get when I go to http://inkwatu.com/wp-admin/wp-register.php is a 404 page. When I look at the source for that I see <p> </p> followed by a whole lot of other stuff.

    Is this what you see?

    whooami

    (@whooami)

    17 years, 3 months ago

    yap. whats in your wp-config.php? anything that looks unusual? how about your wp-settings.php ??

    you dont need to paste the contents of the files, I just want you to look inside them.

    when you are looking at your files, using your ftp client, do you see the timestamps? If you do, do you see that any files inside the same directory as wp-config.php (including that file) have timestamps that seem out of the ordinary? as if to suggest that they have been edited recently?

    whooami

    (@whooami)

    17 years, 3 months ago

    also, do this : if your files look okay, disable all of your plugins. you can do this by renaming your plugins directory (again using your ftp client)

    rename it to anything you want. see if that helps.

    Thread Starter inkwatu

    (@inkwatu)

    17 years, 3 months ago

    None of the wp files have been edited recently and the two you suggested I look inside of didn’t seem to have anything unusual about them, although I don’t know enough to really tell.

    Thread Starter inkwatu

    (@inkwatu)

    17 years, 3 months ago

    ok, let me try that

    whooami

    (@whooami)

    17 years, 3 months ago

    k.. plugins next, then.

    Theres really only so many things than ca be at issue.

    its not your theme, since that wouldnt affect the login page ..

    Thread Starter inkwatu

    (@inkwatu)

    17 years, 3 months ago

    that fixed it…plus, when i look inside my plugin folder, I see this:

    addthis_social_widget_drop.php

    which was added on 12/24/08

    it’s not something I added

Viewing 15 replies - 1 through 15 (of 17 total)
1 2

The topic ‘blank login page’ is closed to new replies.

Tags