Magento

An interesting issue that I’m not sure when it started. I did upgrade recently to the latest blog and wonder if that’s when.

I can view the blog and posts fine, but when I try to navigate to a category, it directs me to log into the Magento Admin panel.

For example: http://www.mydomain.com/blog/cat/projects
...will take me to the Magento admin.

Any idea how to resolve? Thanks!

Same problem, working on Mac, but with Windows, categories redirect to login Admin.

Same problem here. Also don’t know when this occurred. I think after the upgrade to Magento 1.3.0
This is also a security issue whilst it reveals your admin login/admin folder

Correction on my last post. It does NOT reveal the admin folder/ When i am not logged in as admin i see this url after clicking the link:

http://www.mydomain.com/blog/cat/mycategory and it shows me the loginscreen to admin

When i am logged in as admin it shows the same URL but gives me a 404 page in Admin.

Strange thing is that the Admin folder is not shown in the URL…

I have the same problem ...

I don’t know why and how to correct ...

Any idea ?

Same problem here - this is a SERIOUS security issue!

Lazzymonk - any ideas?
Thanks!

Oh - and the custom admin URL is revealed - check the “Forgot your password?” link - takes you straight to the custom admin URL. And this custom URL can be indexed by search engines as well.

I have had to disable the Blog module for now.

In any instance, NOTHING should redirect to the admin log-in screen.

Another discovery:

If “Use Secure URLs in Admin” is selected, ANY blog pages will try to load in https, while all other catalogue pages will load fine (non-secure).

So somehow, for some reason, Magento now sees the blog and any related pages as a part of the admin. And it seems that for blog pages and categories it now can not find, it redirects to /admin, instead of /blog.

Weird! And worrying!

Thanks!

Please check & comment on my bug report here - as I believe that this is a Magento-related issue:

http://www.magentocommerce.com/bug-tracking/issue?issue=6018

Under no circumstances, regardless of what is broken, should the end user be redirected to the admin log-in page.

Thanks!

Hi guys - any update on this?

Hi guys - any update on this?

Not sure what to do now - downgrade to 1.2? Can I? Should I?

You could try this temp fix.  It has solved the routing issue for me and got the blog working fine as far as I can tell, although Discovery is still reporting some problems.

Periculi - 23 April 2009 12:59 PM

You could try this temp fix.  It has solved the routing issue for me and got the blog working fine as far as I can tell, although Discovery is still reporting some problems.

Hi Periculi,

Many thanks for your reply and investigative work!

Which fix are you referring to though - is it this one:

Fix for admin login route:
open config.xml in app/code/community/Monk/Blog/etc
remove <frontName>blog</frontName> from <admin> (see above posts)

Many thanks!

Ok,

That fix seems to be working for now!

Note: Only <frontName>blog</frontName> from <admin> needs to be removed - NOT the other one, underneath.

It all seems to be working now. Fingers crossed!

Many thanks, Periculi - you’re a STAR! Thank you, thank you, thank you!

I have the same problem, I didn’t try the fix cause my website is not live yet and I will wait for an official lazymonk fix before put it in production module.

/subscribe

this souds good… a fixed package… for lazzy Monk… http://www.magentocommerce.com/boards/viewreply/133144/