Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Your current database settings are not able to access the database or have not yet been tested. #70

Open
guidtz opened this issue Jan 18, 2018 · 5 comments

Comments

@guidtz
Copy link

guidtz commented Jan 18, 2018

Hello,

I don't understand why but installation process don't work on database access. So the user and password are ok.
How to debug or to bypass this phase with a manual database creation ?

Regards

@FranzGotsis
Copy link

Hello,

this happened when I tried to update the release. Somehow (I have not understood how it works exactly) but WebCalendar figures out that you try an update and redirects you to the file login.php (there is a hint in the comment in index.php in the root directory).

Reloading the page changes the message to access was tested. Then you are asked to provide the installation password (this is not the password for the database access). If you do not know the installation password, you can reset it (see description).

kind regards
Franz Gotsis

Appendix: Reset the installation password:
In my case all I had to do was to delete the password in the file http:////includes/settings.php
change the line that starts with
install_password:
and remove anything after the colon.
Next time you refresh the link in your browser it will ask you for an installation password and then you can proceed through all steps.

To check the database access (username, password and the name of the database) you can also use phpMyAdmin.

@guidtz
Copy link
Author

guidtz commented Jan 24, 2018

Hello,
yes I tested all of that, reload the page, set the password.
My mysql parameters are ok tested on console.

An idea ... does webcalendar support mariadb ?

@lordbdp
Copy link

lordbdp commented Jan 30, 2018

I find install_password: only in install/index.php, not in includes/settings.php

@FranzGotsis
Copy link

Answer to guidtz:
Orginal question:
Does webcalendar support mariadb ?
Simple answer:
yes
Long answer:
Mariadb is a fork of mysql, that means it started with a common code base because the responsible people behind mariadb thought after sun was bought by oracle, that the new "owner" could not be trusted to leave mysql as open source, as Orcale markets a '"closed" source database.
More information at
https://mariadb.org/about/
WebCalendar is written in PHP and uses the PHP built in function to access databases. PHP 5.x includes a mysqli library to access MYSQL-Databases *** and *** mariadb databases, as they still use the same protocol for access.
If you run PHP 7.x (see Issue 66) which is supported by WebCalendar 1.29 with a few minor modifications, you can access MYSQL databases as well as MARIADB databases.
In fact WebCalendar does not check or bother about the differences between the two database types as the access is (in the source code) is done the same way.

kind regards
Franz

@FranzGotsis
Copy link

answer to lordbdp:
Here comes a more detailed description of how to reset the installation password:
Here comes a sample /includes/settings.php

/* updated via install/index.php on Fri, 22 Dec 2017 12:38:15 -0500
install_password: xxxxx <---- this is the place where you need to delete the password
db_type: mysqli
db_host: localhost
db_database: webcalendar_d <-- this is the database name used by WebCalendar
db_login: webcalendar_c <-- this is the user name used by WebCalendar
db_password: <my database password - that can be tested using phpMyAdmin>
db_persistent: false
readonly: false
user_inc: user.php
use_http_auth: false
single_user: false

end settings.php */

the first line shows the time and date of the last modification.
The second line is the encrypted (hashed) password used for installation of WebCalendar.
If you delete the entry and restart WebCalendar (just browse to right place), you can enter a new password.

This is also security issue. In the "hot" system I have removed the installation script, so that external access to the PHP script is no longer possible (delete the file install/index.php) . In case I need it again, I can always put it back.
For some additional information refer to:
https://www.exploit-db.com/exploits/40057/
In that case (when you have the file removed) there is also no way to reset the installation password.

kind regards
Franz

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants