By waltonm on

After I updated to the latest core I am unable to login to my site.

I had to remark out the following lines in my .htaccess file for the site to work with my provider:

Options -Indexes
Options +FollowSymLinks

This is the error that I get when I try to login:

Fatal error: require_once() [function.require]: Failed opening required '/home/www/waltonbusad.com/password.php' (include_path='.:/usr/local/php/pear/') in /home/www/waltonbusad.com/modules/user/user.module on line 2204

⋅ Categories: Drupal 7.x

Comments

vm’s picture

vm commented

password.php isn't a drupal file. what modules are you running that integrate in any way with passwords?

waltonm’s picture

waltonm commented

The only module I have related to passwords is called Login Security.

vm’s picture

vm commented

I find no similar reports nor any module that would place a password.php file in the root of a drupal install.

waltonm’s picture

waltonm commented


Below is the function that is being called in the user.module in the modules/user Directory:

* Try to validate the user's login credentials locally.
 *
 * @param $name
 *   User name to authenticate.
 * @param $password
 *   A plain-text password, such as trimmed text from form values.
 * @return
 *   The user's uid on success, or FALSE on failure to authenticate.
 */
function user_authenticate($name, $password) {
  $uid = FALSE;
  if (!empty($name) && !empty($password)) {
    $account = user_load_by_name($name);
    if ($account) {
      // Allow alternate password hashing schemes.
      require_once DRUPAL_ROOT . '/' . variable_get('password_inc', 'includes/password.inc');
      if (user_check_password($password, $account)) {
        // Successful authentication.
        $uid = $account->uid;

        // Update user to new password scheme if needed.
        if (user_needs_new_hash($account)) {
          user_save($account, array('pass' => $password));  
        }
      }
    }
  }	
  return $uid; 
}


The following two lines are found at the bottom of settings.php:

$conf['password_inc'] = 'password.php';
$conf['file_temporary_path'] = '/tmp/';

vm’s picture

vm commented

I'll pull down a fresh install of drupal 7, but I don't see this anywhere in my current D7 settings.php files.

-edit-
I just inspected a copy of the default.settings.php file that ships with Drupal core. Those lines you've pasted here are not in a default settings.php file. neither of them.

Is your /default/ folder and settings.php file protected from being written to?

jaskegreen’s picture

jaskegreen commented

I too had these lines in the bottom of my settings file. I upgraded a site from 7.14 to 7.26 incrementally, carefully, and diligently; making backups, clearing cache, and updating the database each time as I went along. I didn't notice I wasn't able to login until my session timed out and I had to, so I don't know at which step the issue occurred.

I was able to get in by requesting a new password and selecting the link from the email. I happen to notice those two lines by chance and decided to delete them because of this post. Finally I, and the other users, can log in again.

I am still having some other issues with the main configuration page and the status report page giving me the WSOD, but all other pages seem to be working, and there are no errors in the log to provide any direction. Any ideas (anyone) if these issues in this series of post are possibly related? Or, is there a correlation between the two pages I mentioned that aren't working?

Thanks @waltomn for the clues and good questions.