It seems that any action I take as Admin, now gets logged as Anonymous and as an access denied.

Type access denied
Date Thursday, August 20, 2009 - 12:29
User Anonymous
Location http://hoslotracer.com/admin/user/permissions
Referrer http://hoslotracer.com/admin/user/permissions
Message admin/user/permissions

Type access denied
Date Thursday, August 20, 2009 - 12:29
User Anonymous
Location http://hoslotracer.com/admin/settings/performance/boost
Referrer http://hoslotracer.com/admin/settings/performance/boost
Message admin/settings/performance/boost

CommentFileSizeAuthor
#3 htaccess.txt6.58 KBStarminder

Comments

mikeytown2’s picture

mikeytown2 commented

First step to get back in, clear your cookies and do a forced refresh of the page. What's happening is your browser is caching the anonymous pages.
Next step: Have you changed the htaccess rules from the default?

mikeytown2’s picture

mikeytown2 commented
Status: Active » Postponed (maintainer needs more info)

I need more info, whats your server setup, and what are your current htaccess rules.

Starminder’s picture

Starminder commented
Status: Postponed (maintainer needs more info) » Active
StatusFileSize
new htaccess.txt6.58 KB

Server Info:
Apache version 1.3.37 (Unix)
PHP version 5.2.8
MySQL version 4.1.21-log
Architecture i386
Operating system FreeBSD
Path to sendmail /usr/sbin/sendmail
Path to PERL /usr/bin/perl
Kernel version 6.2-STABLE

Apache/1.3.37 (Unix) mod_choke/0.07 mod_fastcgi/2.4.2 mod_gzip/1.3.26.1a mod_auth_passthrough/1.8 mod_log_bytes/1.2 mod_bwlimited/1.4 FrontPage/5.0.2.2635.SR1.2 mod_ssl/2.8.28 OpenSSL/0.9.7e-p1 PHP-CGI/0.1b

.htaccess attached.

I did clear browser cache, ran cron, cleared all server caches, etc but to no avail. Really appreciate the help, thanks!

mikeytown2’s picture

mikeytown2 commented

You pasted the boost rules in the wrong place. It should go in between
# RewriteBase /
and
# Rewrite URLs of the form 'x' to the form 'index.php?q=x'.

Starminder’s picture

Starminder commented

Uh-oh. I'm in an ugly cycle of not being able to login...

Starminder’s picture

Starminder commented

Well, that was not a lot of fun - kind of like riding Mr. Toad's Wild ride ALL day!
I'm pretty sure the .htaccess change above is what started it, and from there i couldn't log in. Then I got a boatload of module errors. Then the theme wouldn't display right, etc. Pretty messy. Sadly, the only way out for me was turn off boost for now.

Starminder’s picture

Starminder commented

Update: I ended up having to turn off boost to get things working again. The really bad news (or good news I guess) is that i am still getting the original logged access denied messages. I was starting to think it was Firefox, but I've confirmed I get them in IE.

mikeytown2’s picture

mikeytown2 commented
Status: Active » Postponed (maintainer needs more info)

Until you can track down what is causing the issue, I'm marking this postponed.

mikeytown2’s picture

mikeytown2 commented
Status: Postponed (maintainer needs more info) » Closed (duplicate)

guessing this is a duplicate of this #243115: Hosting Issue - Missing mod_headers: logged out user sees auth pages stored in browser cache if previously authenticated

pixelsweatshop’s picture

pixelsweatshop commented

I can confirm that I am getting this as well and I do not think it is related to what you are proposing in #9. I have even uninstalled Boost and I am still receiving a "page not found" in the dblog for admin functions, even though I can navigate the site without any errors. Any thoughts?

hughworm’s picture

hughworm commented

I'm getting exactly this issue and I don't have boost installed, so I suspect it's unrelated. I wonder did you manage to get to the bottom if it?

hughworm’s picture

hughworm commented

Solved: I tracked it down via the IP to Trend Micro Internet Security which was apparently mirroring my activity to keep me safe: Visiting every page (from an IP in Japan) that I visit, but without the login.