From: omer ilhan on

Hi,
When i enable advanced security i get errors like this:

[Sun Jun 01 14:45:57 2008] [error] [client 85.103.217.41] ident: AUTH: Auth::start() called., referer: http://www.oyunmemo.com/profile.php?id=36140[Sun Jun 01 14:45:57 2008] [error] [client 85.103.217.41] ident: AUTH: Auth::assignData() called., referer: http://www.oyunmemo.com/profile.php?id=36140[Sun Jun 01 14:45:57 2008] [error] [client 85.103.217.41] ident: AUTH: Auth::checkAuth() called., referer: http://www.oyunmemo.com/profile.php?id=36140[Sun Jun 01 14:45:57 2008] [error] [client 85.103.217.41] ident: AUTH: Advanced Security Mode Enabled., referer: http://www.oyunmemo.com/profile.php?id=36140[Sun Jun 01 14:45:57 2008] [error] [client 85.103.217.41] ident: AUTH: Generating new Challenge Cookie., referer: http://www.oyunmemo...com/profile.php?id=36140[Sun Jun 01 14:45:57 2008] [error] [client 85.103.217.41] ident: AUTH: Session OK., referer: http://www.oyunmemo.com/profile.php?id=36140[Sun Jun 01 14:45:57 2008] [error] [client 85.103.217.41] ident: AUTH: Auth::getAuth() called., referer: http://www.oyunmemo.com/profile.php?id=36140[Sun Jun 01 14:45:57 2008] [error] [client 85.103.217.41] ident: AUTH: Auth::checkAuth() called., referer: http://www.oyunmemo.com/profile.php?id=36140[Sun Jun 01 14:45:57 2008] [error] [client 85.103.217.41] ident: AUTH: Advanced Security Mode Enabled., referer: http://www.oyunmemo.com/profile.php?id=36140[Sun Jun 01 14:45:57 2008] [error] [client 85.103.217.41] ident: AUTH: Session OK., referer: http://www.oyunmemo.com/profile.php?id=36140
[Sun Jun 01 14:45:58 2008] [error] [client 85.103.217.41] ident: AUTH: Auth::start() called., referer: http://www.oyunmemo.com/profile.php?id=36140[Sun Jun 01 14:45:58 2008] [error] [client 85.103.217.41] ident: AUTH: Auth::assignData() called., referer: http://www.oyunmemo.com/profile.php?id=36140[Sun Jun 01 14:45:58 2008] [error] [client 85.103.217.41] ident: AUTH: Auth::checkAuth() called., referer: http://www.oyunmemo.com/profile.php?id=36140[Sun Jun 01 14:45:58 2008] [error] [client 85.103.217.41] ident: AUTH: Advanced Security Mode Enabled., referer: http://www.oyunmemo.com/profile.php?id=36140[Sun Jun 01 14:45:58 2008] [error] [client 85.103.217.41] ident: AUTH: Generating new Challenge Cookie., referer: http://www.oyunmemo...com/profile.php?id=36140[Sun Jun 01 14:45:58 2008] [error] [client 85.103.217.41] ident: AUTH: Security Breach. Challenge Cookie mismatch., referer: http://www.oyunmemo.com/profile.php?id=36140[Sun Jun 01 14:45:58 2008] [error] [client 85.103.217.41] ident: AUTH: Auth::logout() called., referer: http://www.oyunmemo.com/profile.php?id=36140[Sun Jun 01 14:45:58 2008] [error] [client 85.103.217.41] ident: AUTH: Auth::login() called., referer: http://www.oyunmemo.com/profile.php?id=36140[Sun Jun 01 14:45:58 2008] [error] [client 85.103.217.41] ident: AUTH: Loaded storage container (DB), referer: http://www.oyunmemo.com/profile.php?id=36140[Sun Jun 01 14:45:58 2008] [error] [client 85.103.217.41] ident: AUTH: Auth::login() called., referer: http://www.oyunmemo.com/profile.php?id=36140[Sun Jun 01 14:45:58 2008] [error] [client 85.103.217.41] ident: AUTH: Auth::getAuth() called., referer: http://www.oyunmemo.com/profile.php?id=36140[Sun Jun 01 14:45:58 2008] [error] [client 85.103.217.41] ident: AUTH: Auth::checkAuth() called., referer: http://www.oyunmemo.com/profile.php?id=36140[Sun Jun 01 14:45:58 2008] [error] [client 85.103.217.41] ident: AUTH: Unable to locate session storage., referer: http://www.oyunmemo.com/profile.php?id=36140

It seems challenge cookie mismatch is about regenerating the challenge cookie. should not it generated once? i couldnt find why the authChecks==1 is not
working. here the method where i set the auth for my page. what am i doing wrong?

function getAuth(){ global $auth; global $options; global $mdb2; if (!isset($auth)){ $auth =& new Auth('DB', $options, 'loginFunction',false); } $auth->setAdvancedSecurity(); //$auth->regenerateSessionId = true; $auth->setExpire(14400, false); $auth->setIdle(14400, false); $auth->setLoginCallback('myLoginCallback'); $auth->setFailedLoginCallback('myFailedLoginCallback');
return $auth; }
_________________________________________________________________
News, entertainment and everything you care about at Live.com. Get it now!
http://www.live.com/getstarted.aspx