Facing strange issue with login and auto logout in admin panel

[biyej87937]

Hello, We can not login to admin panel, or we are able to login after 10th attempt and after that we are log out in a few seconds.

Admin panel is behind cloudflare, and our websites recently reached more than 1M unique visitors per month.

Code: Select all

/usr/local/vesta/log/nginx-error.log

[error] FastCGI sent in stderr: "PHP message: PHP Notice: Undefined index: user in /usr/local/vesta/web/templates/header.html on line 17
PHP message: PHP Notice:  Undefined index: user in /usr/local/vesta/web/templates/header.html on line 41
PHP message: PHP Notice:  Undefined index: look in /usr/local/vesta/web/templates/header.html on line 42" while reading response header from upstream, client: 000.000.000.000, server: _, request: "GET /login/ HT>

Thanks for any help.

[myVesta]

Are you sure the disk is not full?

[biyej87937]

Are you sure the disk is not full?

Yes. Checked with df -h

Also checked htop CPU is about 80%

Every domain is behind cloudflare. Also it looks like at traffic peak we are not able to login at many attempts, but when lower traffic we are able to login at 10th attempt. After login, when clicked on something, auto logout.

What can cause this issue? We just know when we had lower traffic and before myVesta redesign, we do not have this issue. Also can someone do this outside like DDoS?

Many thanks for any help.

[biyej87937]

Today we were able to login after 5th attempt when traffic was lower. When traffic is higher it is not possible.

What can cause this issue?

[myVesta]

Really have no idea.
What error do you see when login fails?

[biyej87937]

Really have no idea.
What error do you see when login fails?

None error on the site or in console. Just same site after clicking on button.

How to downgrade myVesta to version before redesign?

[myVesta]

How to downgrade myVesta to version before redesign?

If you really want old myVesta version before redesign:

Code: Select all

cd /root
rm -rf /root/vesta
git clone https://github.com/myvesta/vesta.git

cd vesta
git reset --hard 2afbc2cddfbbc57f296640cb28d89fb29b2526c2

cp -rf /root/vesta/* /usr/local/vesta

[T4B]

i dont think this is a issue with the redesign

[putude]

Same issue.
Log file

Code: Select all

2024/02/25 20:29:12 [error] 4143675#0: *8614 FastCGI sent in stderr: "PHP message: PHP Notice:  Undefined index: user in /usr/local/vesta/web/templates/header.html on line 17
PHP message: PHP Notice:  Undefined index: user in /usr/local/vesta/web/templates/header.html on line 41
PHP message: PHP Notice:  Undefined index: look in /usr/local/vesta/web/templates/header.html on line 42" while reading response header from upstream, client: *.*.*.*, server: _, request: "GET /login/ HTTP/1.1", upstream: "fastcgi://unix:/var/run/vesta-php.sock:", host: "myserver.com:port", referrer: "https://myserver.com:port/list/mail/?domain=clientdomain.com"

[lgreen]

I have a similar problem, when I put admin panel behind Cloudflare, it will always auto logout, but I think this is because of different IP address by Cloudflare.
You can tail auth.log file, when IP address changed, it will log out, I don't know where the config that I can bypass Cloudflare IP.

Code: Select all

tail -f /usr/local/vesta/log/auth.log

Anyway, I'm using one of port from "HTTPS ports supported by Cloudflare".
https://developers.cloudflare.com/funda ... ork-ports/