sirspider

So since it seemed that all of this started after a failed upgrade, I decided to update to the current beta version. It took quite a while to update but now everything seems to be in order. I will update you once more if I run into any more issues.

Sorry for the bump but I cannot seem to be able to edit my previous post anymore.

It turns out the Steam integration plugin I had was still causing some errors despite it being disabled so I went ahead and deleted both disabled plugins I had, no luck.

I tried creating a new theme in case the default one was broken. I could not get past the "save" button. When I went back, there were many new themes with a generic name. I tried deleting all of them, including the default theme. I am now getting an error due to no themes existing at all. I don't know why or how I was able to do that.

Enabling dev mode seems to work and I was able to create a new theme with it enabled. While it's enabled, I also don't see any of the `ips is not defined` / `jQuery is not defined` JavaScript errors. They come back as soon as I disable dev mode.

I'm running php-fpm 8.1 with nginx on Debian 10. Both nginx and php-fpm are configured to run as www-data. Permissions are as follow:

$ ls -alhd /var/www
drwxr-xr-x 1 root root 8 Aug 15  2019 /var/www

$ ls -alhd /var/www/html
drwxrwxr-x 1 root www-data 818 Aug 27 18:16 /var/www/html

$ ls -alh /var/www/html/<REDACTED>.com
total 104K
drwxrwxr-x 1 root     www-data  410 Sep  3 15:21 .
drwxrwxr-x 1 root     www-data  818 Aug 27 18:16 ..
-rw-rw-r-- 1 www-data www-data  180 Aug 22 04:07 404error.php
drwxrwxr-x 1 www-data www-data   68 Aug 22 04:07 admin
drwxrwxr-x 1 www-data www-data   32 Aug 22 04:07 api
drwxrwxr-x 1 www-data www-data   98 Aug 27 18:15 applications
-rw-rw-r-- 1 www-data www-data    0 Aug 22 04:07 conf_global.dist.php
-rw-rw-r-- 1 www-data www-data  400 Jul 25  2020 conf_global.php
-rw-rw-r-- 1 www-data www-data  15K Aug 22 04:07 Credits.txt
drwxrwxr-x 1 www-data www-data  10K Sep  3 15:16 datastore
-rw-rw-r-- 1 www-data www-data 1.4K Aug 22 04:07 error.php
-rw-rw-r-- 1 www-data www-data 1.2K Jul 16  2019 favicon.ico
-rw-rw-r-- 1 www-data www-data  137 Oct  4  2018 .htpasswd
-rw-rw-r-- 1 www-data www-data  435 Aug 22 04:07 index.php
-rw-rw-r-- 1 www-data www-data  57K Aug 27 18:15 init.php
drwxrwxr-x 1 www-data www-data  114 Jul  7  2019 loading
drwxrwxr-x 1 www-data www-data   64 Aug 22 04:07 oauth
drwxrwxr-x 1 www-data www-data   38 Aug 28 15:23 plugins
-rw-rw-r-- 1 www-data www-data  723 Aug 22 04:07 sitemap.php
drwxrwxr-x 1 www-data www-data  502 Aug 27 18:16 system
drwxrwxrwx 1 www-data www-data   10 Aug 20  2020 themes
drwxrwxr-x 1 www-data www-data 1.4K Aug 29 20:01 uploads

`/var/www/html/<REDACTED>.com` is `root:www-data` because of the sftp chroot I had set up for support (it was `www-data:www-data` before). I have su'd as www-data and can confirm read/write access to all directories listed in Jim's post. 

I feel like the permissions are all correct. Is there a way for me to check permissions to these directories within the AdminCP or similar?

Edit: I am not using SELinux either

Making those directories writable seems to have sped up the site. Looks like I had messed up ownership when using rsync for the manual update.

The JS errors still remain despite all customizations being disabled. I have updated the access credentials. Thank you for the help!

I recently updated to 4.7.1 after the site being dormant for almost a year. I tried disabling all customizations, including deleting an outdated theme and also cleared system cache from the support menu. When I clicked on my avatar in the top right, `#elUserLink_menu` got appended to the URL bar but nothing happened (no popups and also a lot of JS errors in console) Clearing my browser cache seems to have fixed the popup menu not appearing but clicking AdminCP from the dropdown just opens a new "about: blank" tab in Chrome. I have tried downloading my IPS suite and rsync'd it over into my html directory, cleared cache again but no luck. I am still getting a few JavaScript errors and the site is taking around 15 seconds to load. As part of the 4.7.1 upgrade, I also switched over to PHP 8.1 (from 7.4) and enabled CRON tasks. I haven't touched this software much in the past couple of years and don't know where to start. Help is appreciated!

Hello, I run my own web server and as of a few updates ago, the updater no longer functions.

Before, it was able to download and extract the files onto the filesystem all on its own but now it no longer does that and asks me for FTP information to perform an upgrade.

On 4.3 and 4.4, it would try downloading onto the filesystem and just tell me that something went wrong (without telling me what went wrong) and it asked me to do it manually but now it straight up prompts me for ftp information. I don't have FTP set up on this webserver and I don't want to create an SFTP account just for that. Am I perhaps missing some PHP modules or filesystem permissions? There are no errors in the logs that I can see so it makes this difficult to diagnose. 

Hello, I seem to be encountering issues when logging into my community's admin control panel.
This issue is intermittent and I'm not entirely certain what could be causing it. Sometimes I have to log in 4-5 times to the AdminCP before it will log me in.

The issue seems to be because of the ref= query parameter containing the adsess= parameter when accessed. I think a way to replicate it is to:
1. log into the admin CP and navigate to some portion of the adminCP (for example users)
2. Browse the community and click the AdminCP button (this creates a new admin session)
3. Go back to the first tab that had the original admin session and try to perform an action. This brings you back to the login screen with the adsess= encoded into the ref= parameter for the login screen. You'll then have to log in several times before you're able to finally go through and properly log in without issue.
4. Closing those tabs and attempting to re-open a new AdminCP session from the community's dropdown sometimes also becomes bricked in that process and ends up in that login loop.

I am running Invision Community v4.4.10 with PHP-fpm 7.2 behind nginx

Is there anything I could reconfigure on my end, whether it be IPS/nginx/PHP configuration to get around this?

I understand the need for administrative sessions being separate from user sessions, but I feel there are better alternatives to avoid CSRF/XSS and the likes nowadays.
I'm usually all over the place and having to keep track of which tab is the up to date one can become a little tedious. Not to mention if I have been working on editing something in the admin panel and I accidentally open a new session without having saved my changes, those changes are now forever lost.

I initially opened a support ticket but was referred to this forum instead.

Hello, I'm trying to create an "Edit in ACP" button on the user profile headers.

This is the template code I have so far:

             {{if \IPS\Member::loggedIn()->isAdmin() }}
              <li>
                <a href='{url="app=core&module=members&controller=members&do=view&id={$member->member_id}" base="admin"}' class='ipsButton ipsButton_overlaid'>
                  <i class='fa fa-pencil'></i> <span class='ipsResponsive_hidePhone ipsResponsive_inline'>  Edit in ACP</span>
                </a>
              </li>
              {{endif}}

However after following the link and being redirected to the admincp login page, the redirect removes the `do=view` part of the URL. It becomes:

&app=core&module=members&controller=members&id=1

How can I go about ensuring that `do=view` remains?