search

zeruniverse / Password-Manager

An online keepass-like tool to manage password. client-side AES encryption!
Other
170 stars 44 forks source link

Unable to access signup.php from AWS Instance #202

Closed tusharjambhekar closed 6 years ago

tusharjambhekar commented 6 years ago

I have enabled AWS RDS(MySql) VM can able to access webpage but unable to access link for signup.php.

image

Pofilo commented 6 years ago

In the file src/function/config.php, make sure you have $ALLOW_SIGN_UP setted at true.

BenjaminHae commented 6 years ago

In the file src/function/config.php, make sure you have $ALLOW_SIGN_UP setted at true.

This is the default value... Weird.

@tusharjambhekar Could you please open the "Network" tab or similar in the developer tools of your browser, reload the page and show us the content of the response of "info.php" when opening the signup page? (Make sure to remove private details like host domain).

BenjaminHae commented 6 years ago

@tusharjambhekar To pin down the problem: is the "signup" button visible on the login page?

tusharjambhekar commented 6 years ago

In the file src/function/config.php, make sure you have $ALLOW_SIGN_UP setted at true is True image

BenjaminHae commented 6 years ago

The request provokes an error on your webserver. You should check your logs for more information.

tusharjambhekar commented 6 years ago

I am unable to find any logs at apache as well as at mysql, nothing coming

BenjaminHae commented 6 years ago

Then it's nearly impossible to pin it down.

tusharjambhekar commented 6 years ago

I am getting below unusual error message at /httpd/error_log

image

BenjaminHae commented 6 years ago

Can you please provide the specified line from the file in your installation? I can't see anything wrong in this file in the repo.

zeruniverse commented 6 years ago

To get a ‘signup not allowed’ message, the php backend should return a ‘method not allowed’ message (not anything else). And this message will only be returned if $ALLOW_SIGNUP is false.

Looks very weird to me.

On Fri, Mar 16, 2018 at 1:37 PM Benjamin Häublein notifications@github.com wrote:

Can you please provide the specified line from the file in your installation? I can't see anything wrong in this file in the repo.

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/zeruniverse/Password-Manager/issues/202#issuecomment-373789578, or mute the thread https://github.com/notifications/unsubscribe-auth/AEbvNCga1_U6aPmZY8LPHL8Yvgn7oc_Kks5te_hLgaJpZM4St2iy .

tusharjambhekar commented 6 years ago

How to troubleshoot from this

image

image

BenjaminHae commented 6 years ago

You need to show us your webservers error log. The access log is not enough to figure it out.

zeruniverse commented 6 years ago

And if you don’t mind:

  1. Please provide the password manager login address of your AWS instance

  2. Please paste your Apache error log, it would contain PHP error

On Sat, Mar 17, 2018 at 10:00 AM Benjamin Häublein notifications@github.com wrote:

You need to show us your webservers error log. The access log is not enough to figure it out.

— You are receiving this because you commented.

Reply to this email directly, view it on GitHub https://github.com/zeruniverse/Password-Manager/issues/202#issuecomment-373922262, or mute the thread https://github.com/notifications/unsubscribe-auth/AEbvNHLaQl-L5bAj5gEyVEwuoHRg7qNRks5tfRcKgaJpZM4St2iy .

zeruniverse commented 6 years ago

On Sat, Mar 17, 2018 at 11:50 AM Jeffery ZHAO zzy8200@gmail.com wrote:

And if you don’t mind:

  1. Please provide the password manager login address of your AWS instance

  2. Please paste your Apache error log, it would contain PHP error

On Sat, Mar 17, 2018 at 10:00 AM Benjamin Häublein < notifications@github.com> wrote:

You need to show us your webservers error log. The access log is not enough to figure it out.

— You are receiving this because you commented.

Reply to this email directly, view it on GitHub https://github.com/zeruniverse/Password-Manager/issues/202#issuecomment-373922262, or mute the thread https://github.com/notifications/unsubscribe-auth/AEbvNHLaQl-L5bAj5gEyVEwuoHRg7qNRks5tfRcKgaJpZM4St2iy .

tusharjambhekar commented 6 years ago
  1. ec2-54-226-202-102.compute-1.amazonaws.com/signup.php
  2. [root@passmanager ec2-user]# tail -f /var/log/httpd/error_log [Sat Mar 17 13:48:04 2018] [error] [client 103.224.156.138] PHP Parse error: syntax error, unexpected '[' in /var/www/html/rest/info.php on line 28, referer: http://passmanager.ml/signup.php [Sat Mar 17 13:48:05 2018] [error] [client 103.224.156.138] File does not exist: /var/www/html/css/bootstrap.min.css.map [Sat Mar 17 13:49:08 2018] [error] [client 103.224.156.138] PHP Parse error: syntax error, unexpected '[' in /var/www/html/rest/info.php on line 28 [Sat Mar 17 13:49:20 2018] [error] [client 103.224.156.138] PHP Parse error: syntax error, unexpected '[' in /var/www/html/rest/info.php on line 28, referer: http://passmanager.ml/signup.php [Sat Mar 17 13:49:21 2018] [error] [client 103.224.156.138] File does not exist: /var/www/html/css/bootstrap.min.css.map [Sat Mar 17 13:50:20 2018] [error] [client 103.224.156.138] PHP Parse error: syntax error, unexpected '[' in /var/www/html/rest/info.php on line 28, referer: http://passmanager.ml/signup.php [Sat Mar 17 13:50:21 2018] [error] [client 103.224.156.138] File does not exist: /var/www/html/css/bootstrap.min.css.map [Sat Mar 17 13:57:23 2018] [error] [client 103.224.156.138] PHP Parse error: syntax error, unexpected '[' in /var/www/html/rest/info.php on line 28, referer: http://passmanager.ml/ [Sat Mar 17 13:57:29 2018] [error] [client 103.224.156.138] PHP Parse error: syntax error, unexpected '[' in /var/www/html/rest/info.php on line 28, referer: http://passmanager.ml/ [Sat Mar 17 17:20:47 2018] [error] [client 183.83.212.166] PHP Parse error: syntax error, unexpected '[' in /var/www/html/rest/info.php on line 28, referer: http://ec2-54-226-202-102.compute-1.amazonaws.com/signup.php
tusharjambhekar commented 6 years ago

Hi , If you there free I can give you access of AWS instance.

On Sat, Mar 17, 2018 at 9:20 PM, Jeffery Zhao notifications@github.com wrote:

And if you don’t mind:

  1. Please provide the password manager login address of your AWS instance

  2. Please paste your Apache error log, it would contain PHP error

On Sat, Mar 17, 2018 at 10:00 AM Benjamin Häublein < notifications@github.com> wrote:

You need to show us your webservers error log. The access log is not enough to figure it out.

— You are receiving this because you commented.

Reply to this email directly, view it on GitHub https://github.com/zeruniverse/Password-Manager/ issues/202#issuecomment-373922262, or mute the thread https://github.com/notifications/unsubscribe-auth/AEbvNHLaQl- L5bAj5gEyVEwuoHRg7qNRks5tfRcKgaJpZM4St2iy

.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/zeruniverse/Password-Manager/issues/202#issuecomment-373930292, or mute the thread https://github.com/notifications/unsubscribe-auth/AX78FRcXTSE5XGVglQdPjwkrMgA4GvEgks5tfTC6gaJpZM4St2iy .

tusharjambhekar commented 6 years ago

I am trying to browse from Linux text-browser there also I am getting the following issue image

BenjaminHae commented 6 years ago

Can you please provide the specified line from your local file named in the error log in your installation? I can't see anything wrong in this file in the repo.

tusharjambhekar commented 6 years ago

Yes I know nothing wrong in the repo but then also don't know what is this error.

[Sat Mar 17 17:20:47 2018] [error] [client 183.83.212.166] PHP Parse error: syntax error, unexpected '[' in /var/www/html/rest/info.php on line 28, referer: http://ec2-54-226-202-102.compute-1.amazonaws.com/signup.php

image

BenjaminHae commented 6 years ago

Which php version is installed?

tusharjambhekar commented 6 years ago

It's php56.x86_64

BenjaminHae commented 6 years ago

Could you try switching to php 7?

tusharjambhekar commented 6 years ago

Yes , I am going to do it right now only ... thinking of that

tusharjambhekar commented 6 years ago

Upgraded php version to 7 can able to login to signup page but now getting as error " Hostdomain mismatch. Please check your config file."

image

BenjaminHae commented 6 years ago

Yes, please check your config, especially this line: //This is to prevent cross-site attacks. If $HOSTDOMAIN is not the prefix of HTTP_REFERER string, an exception will be raised. $HOSTDOMAIN...

zeruniverse commented 6 years ago

I'm using PHP5.6 as well and I can run password-manager smoothly. Weird...

But anyway, after editing $HOSTDOMAIN, you will be able to use it

tusharjambhekar commented 6 years ago

I have done changes at config.php then also giving the error .

image

Pofilo commented 6 years ago

According to the README file:

From v9.13, Password-Manager only supports HTTPS

Plus, $HOSTDOMAIN must be exact ! So you have to set up the HTTPS to make it work.

zeruniverse commented 6 years ago

An alternative is to set $HOSTDOMAIN to http:// instead of https://. Though this is not tested. Finally you will need https to keep your password safe

On Sun, Mar 18, 2018 at 5:00 AM Pofilo notifications@github.com wrote:

According to the README file:

From v9.13, Password-Manager only supports HTTPS

Plus, $HOSTDOMAIN must be exact ! So you have to set up the HTTPS to make it work.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/zeruniverse/Password-Manager/issues/202#issuecomment-373982645, or mute the thread https://github.com/notifications/unsubscribe-auth/AEbvNDWFGtn9YxlsNT9njFY2a5qwEoknks5tfiI0gaJpZM4St2iy .

tusharjambhekar commented 6 years ago

Thanks http:// working but I will configure web server to run on ssl .

zeruniverse commented 6 years ago

@tusharjambhekar I want to figure out why PHP 5.6 doesn't work. Could you compare your phpinfo() page with mine?

Mine is here: https://secure.zzeyu.com/

tusharjambhekar commented 6 years ago

Hi I have already uninstalled the old version of PHP.