Hostbill instant logout problem

Started by khairilgunawan, June 01, 2016, 08:51:51 AM

khairilgunawan

I tired install hostbill on my server (digitalocean), I am always got instant logout problem. I've trying install hostbill with :
- Centos 6.8 64bit minimal (interworx installed, litespeed, php 5.6, ioncube loader)
- Centos 6.8 64bit minimal (without interworx, just install httpd, mysql, php5.6, ioncube loader)
- Centos 6.8 64bit minimal (without interworx, just install liespeed standard 5, php 5.6, mysql, ioncube loader)
- Debian 7.10 64bit minimal (just install apache2, mysql, php5.4, ioncube loader)

I was followed this instruction http://wiki.hostbillapp.com/index.php?title=Automatic_Logout_after_login_problem
And still got an instant logout problem.

but when I am change session.save_path = "3;/tmp"
I am not get instant logout problem, but I can't change everything in hostbill admin.

I think the problem is hostbill, because i was trying install another application like wordpress, joomla, drupal, they are running without problem.
And i've followed http://www.webhostingtalk.com/showthread.php?t=944954
Still got same problem...

My question is how to fix that? this is problem of hostbill or my server configuration problem? mostly application like wordpress, joomla, drupal is working perfectly on my server, but why hostbill is not?

BRJP

Quote from: khairilgunawan on June 01, 2016, 08:51:51 AM
but when I am change session.save_path = "3;/tmp"
I am not get instant logout problem, but I can't change everything in hostbill admin.

Does your /tmp location have r/w access by the same user that HostBill is installed under?
Kind regards,
Bradley Porter
--------------------
Find out more about SaneChoice Services at: https://www.sanechoice.cloud/

khairilgunawan

I am following this instruction http://wiki.hostbillapp.com/index.php?title=Automatic_Logout_after_login_problem
chmod -R 333 /tmp

And in php.ini file
session.save_path = "/tmp"
Still get instant logout

But when I change it to
session.save_path = "3;/tmp"
Instant logout is fixed, but I cant changet everything in admin page.

hbillclient

Hi,

Quotebut I cant changet everything in admin page
What happens when you try to change anything? Does it show any errors?

Thanks.

khairilgunawan

Quote from: hbillclient on June 04, 2016, 05:49:11 AM
Hi,
What happens when you try to change anything? Does it show any errors?

Thanks.
Thanks for your reply

No error notification, my setting just goes back to default (previous settings).
Example when I change my hostbill site name to "My Business Name", When i click save or submit, its go back to default "Your Business Name".

khairilgunawan

for more details, please see this video that I uploaded.

https://youtu.be/dLxaiQjJZKQ

BRJP

#6
Thanks for the video.

I notice some potentially strange behaviour within your video when you click login.  Each time you click login, your current IP address changes.  Within three clicks of login, your IP address changes from 144, 142 to 143.  Have a look at the first 10 seconds of your video and watch your IP address change each time you click login.

I do not expect the IP address to change that quickly - even a dynamic IP address should only change when you disconnect from the internet and reconnect.  I suspect this rapid IP address change is causing some issues with HostBill security.  I think you manage to log in when you get 'lucky'.  i.e. the IP address does not change and remains persistent for a while.

How are you connecting to the Internet and why does your IP address change overtime you try and login?  Do you have IP load balancing? 
Kind regards,
Bradley Porter
--------------------
Find out more about SaneChoice Services at: https://www.sanechoice.cloud/

hbillclient

Nice catch Brad! The first time I looked at the video, I missed the IP changes completely.

Frequent IP changes will certainly invalidate the PHP sessions in HB and hence you are facing these issues. I would suggest you to use a stable internet connection in the first place.

Thanks.


khairilgunawan

Problem resolved!
Thanks

Quote from: BRJP on June 05, 2016, 04:46:59 PM
Thanks for the video.

I notice some potentially strange behaviour within your video when you click login.  Each time you click login, your current IP address changes.  Within three clicks of login, your IP address changes from 144, 142 to 143.  Have a look at the first 10 seconds of your video and watch your IP address change each time you click login.

I do not expect the IP address to change that quickly - even a dynamic IP address should only change when you disconnect from the internet and reconnect.  I suspect this rapid IP address change is causing some issues with HostBill security.  I think you manage to log in when you get 'lucky'.  i.e. the IP address does not change and remains persistent for a while.

How are you connecting to the Internet and why does your IP address change overtime you try and login?  Do you have IP load balancing? 

Quote from: hbillclient on June 05, 2016, 11:47:46 PM
Nice catch Brad! The first time I looked at the video, I missed the IP changes completely.

Frequent IP changes will certainly invalidate the PHP sessions in HB and hence you are facing these issues. I would suggest you to use a stable internet connection in the first place.

Thanks.

Yes that is problem from my ISP IP is always changed every second, I dont know why my IP is always changed.
Now I test login in Admin page with VPN, and instant logout is solved.
Thanks.

hbillclient

Welcome  8). By the way it is a very strange situation with your ISP changing IP's all the time...very odd indeed.

boka003

Hello guy,

I have same problem  :-\

Here is my php.ini settings https://prnt.sc/uhmysb


Do you have some suggestion for me?

Thanks