View Issue Details

IDProjectCategoryView StatusLast Update
0017345mantisbtinstallationpublic2014-06-01 06:31
ReporterMuhammed Riyas Assigned Todregad  
PrioritynormalSeveritymajorReproducibilityalways
Status closedResolutionno change required 
Product Version1.2.17 
Summary0017345: Your browser either does not know how to handle cookies, or refuses to handle them.
Description

I have completed the mantis installation and removed admin folder. When I am trying to login as the default user (administrator/root), It is producing the following error

Your browser either does not know how to handle cookies, or refuses to handle them.

How can I solve this issue? Please replay immediately

Thanks
Muhammed Riyas

TagsNo tags attached.
Attached Files
mantis.jpg (95,550 bytes)   
mantis.jpg (95,550 bytes)   
mantis1.jpg (99,772 bytes)   
mantis1.jpg (99,772 bytes)   

Activities

grangeway

grangeway

2014-05-17 16:12

reporter   ~0040562

No need to remove the admin folder - it contains some useful utilities to check configuration and to clear out stuck emails

Muhammed Riyas

Muhammed Riyas

2014-05-18 00:00

reporter   ~0040563

Last edited: 2014-05-18 00:01

When I add admin folder back it shows like this

Warning: Admin directory should be removed.

grangeway

grangeway

2014-05-18 10:09

reporter   ~0040567

I'd set $g_admin_checks = OFF; in the config. This reduces a DB query on the logon / index page. Removing the admin folder doesn't really increase security and removes the admin check pages - you could remove install.php

In terms of the cookie thing - have you set any configuration options regarding to cookies?

Does your path to the website include a / or not in the conifg?

dregad

dregad

2014-05-19 03:00

developer   ~0040568

@grangeway

Removing the admin folder doesn't really increase security

I disagree. Leaving access to the admin folder open is most definitely a security risk (leaking system information such as DB version, system paths, etc and even allowing anyone to execute the install script) because these pages don't check if user is permitted access

IMO $g_admin_checks = OFF is meant for development purposes and should not be used on production systems.

Muhammed, with regards to the cookie message, could be due to a case sensitivity issue in the cookie or use of invalid characters in the cookie prefix. Please search on this tracker for related issues.

Since it this is not a MantisBT issue but a request for help in configuring the system, I'll resolve this as no change required.

Muhammed Riyas

Muhammed Riyas

2014-05-21 05:43

reporter   ~0040607

It was the issue with varnish. I have added the varnish exception for mantis url's in the varnish configuration file and now mantis working fine. Thanks to all....

dregad

dregad

2014-05-21 07:51

developer   ~0040608

Thanks for providing feedback.