case 5077 fix does not work

[dacstyle]

After uploading the "dologin.php" file I'm still having the same redirect issue.

[Matt]

You must be experiencing a different issue. Please first try performing a full re-upload of all the WHMCS files and if you continue to have problems after that, please get in touch with our support team.

 

Matt

[slim]

DID YOU UPLOAD INTO THE ADMIN FOLDER (or whatever you now call your admin folder) -- IT MUST GO HERE!

[ADz83]

Warning: main(../init.php): failed to open stream: No such file or directory in /home/****/public_html/clients/dologin.php on line 0

 

Warning: main(../init.php): failed to open stream: No such file or directory in /home/****/public_html/clients/dologin.php on line 0

 

Fatal error: main(): Failed opening required '../init.php' (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/****/public_html/clients/dologin.php on line 0

[WHMCS Andrew]

This means you have uploaded the patch file to your WHMCS root rather than the admin folder as detailed in the patch notes.

 

You will need to restore your dologin.php file in the WHMCS root (you can obtain this from the full version download) and place the patched file in your admin directory.

[capitan6682]

Hi Andrew,

 

already uploaded the dologin.php to admin folder but same issue occur.

[WHMCS Ryan]

As Matt suggested earlier did you try a full re-upload of all the WHMCS files? If not, please do so and if you continue to have issues you will want to open a ticket for further investigation.

 

--Thanks

[HoangLoc]

Hi Andrew,

 

already uploaded the dologin.php to admin folder but same issue occur.

 

I was just like you.

[youknowwhoiam]

That's because install/install.php is wrong.

 

it should be

 

$hasher = new WHMCS_Security_Hash_Password();

$passwordHash = $hasher->hash($_REQUEST['password']);

$apiPasswordHash = $hasher->hash(md5($_REQUEST['password']));

mysql_query(sprintf("UPDATE `tbladmins` set `password`='%s', `passwordhash`='%s' where `username`='%s'", $apiPasswordHash, $passwordHash, $_REQUEST['username'] ));

 

$_REQUEST['password'] not $password, they are different. Hope they can fix it.

[Turboweb]

I had same issue with Yubico TFA after applying the update and hot fix. All I did to get it working is edited - tbladmins - for the admin user logging in - removed the authmodule field (in my case - yubico ).

 

Then attempted a login - I got an alert saying admin tfa is required bla bla bla - entered the yubico key data - got the backup key and everything is working fine..checked the db and the authdata is where it should be