XF 2.2 Cannot log into admin after a few failed attempts

[CrispinP]

Hi folks,

I switched from Chrome to FF and I mistakenly used the wrong password to log into admin.
When I try log in now it just takes me back to the admin login screen. No message of anything.

I've tried:

• Truncating the admin session cache table
• Promoting another test account I had to admin (both table update and config.php super admin

Same thing happens to that.

What could this be?

 

[Paul B]

That has to be something server side if it is just refreshing.

Is ezoic implemented?

 

[CrispinP]

Is ezoic implemented?

Yes...... I installed it on friday and to be fair, just assumed the password issue was me.

I've just disabled Ezoic and now can gain access.

Problem is XF's or theirs?

 

[CrispinP]

To be exact - it's when I enabled ezoic and cloudflare. When I disconnected that and went "normal" cloudflare, the problem is not there.

 

[Paul B]

It's an Ezoic issue - it doesn't play nice with XF.

You may be able to investigate to determine the exact cause and then change settings in Ezoic/CF to mitigate it.

You can also try adding this to the config.php file:

if (isset($_SERVER['HTTP_X_FORWARDED_FOR']))
{
$_SERVER['REMOTE_ADDR'] = $_SERVER['HTTP_X_FORWARDED_FOR'];
}

Or this:

if (isset($_SERVER['HTTP_CF_CONNECTING_IP']))
{
$_SERVER['REMOTE_ADDR'] = $_SERVER['HTTP_CF_CONNECTING_IP'];
}

 

[CrispinP]

great, thanks. Can confirm that both those options, seperately, fix the problem.

In all fairness, the guys from Ezoic are being super helpful in trying to understand it but hindered by me not wanting to give them admin panel access
What do they need to do, or XenForo need to do, to make this not a problem going foward?

 

[Paul B]

It's due to the server being configured to use a reverse proxy (which is constantly changing) and the real IP address not being exposed consistently and/or CloudFlare being in use.

It's doing what it's supposed to - the config.php switch works around the issue caused by it.

 

[CrispinP]

thanks for the info. If nothing else, hopefully this thread will help other ezoic users.

 

[orex]

We had same issues logging on ACP after integrating Ezoic and the code below solves it. Both codes actually allow us to login but the other code won't show the visitors real IP.

if (isset($_SERVER['HTTP_CF_CONNECTING_IP']))
{
$_SERVER['REMOTE_ADDR'] = $_SERVER['HTTP_CF_CONNECTING_IP'];
}