Quote:
|
Originally Posted by cflsystems
@Ksenia
I tried option #1 and it did NOT work. Again if these security features are tied to the IP address they will never work when moved from one server to another unless keys are regenerated which is impossible without login in to admin or doing "forgot password".... Since even with all of them OFF you still can't login to admin the only way left is "forgot password"....
|
Steve, I'm sorry for delay with reply -I was preparing the "
Great Summer Sale" and had a lot on my plate. Now that the countdown is already started, I can ease off a little.
I have consulted with Ildar, Head of maintenance group, below is what I found out.
Default distributional package ( as well as upgrade packs) protect by IP only:
*several pages, such as 'patch/upgrade center', security settings.
*current admin's session ID
if the transfer of the following keys:
Code:
$blowfish_key
$xc_security_key_session
$xc_security_key_config
$xc_security_key_general
has not helped, we suppose the possible reasons are:
1)PHP version on dev server is >=PHP5.3, while on production server PHP 5.2 is installed
2)One of the following was not completed successfully on dev server:
-config.php pathcing
-Security keys generation
-signatures update during the upgrade
3)Protection by IP is enabled:
***const BLOCK_UNKNOWN_ADMIN_IP = TRUE;
or
***const ADMIN_ALLOWED_IP = '<YOUR_IPs>';
To find out the exact reason you should contact the support team, as access to your production server is required or successful troubleshooting.