Basic Login /Password Issues - Help Welcome

Hi
I am one of the Administrators of my company’s website, however the web design company who built our website using MODX has long since ceased trading.
I have a frustrating issue each time I try to log on for which I hope someone can help me.

1. I enter my User Name on the manager area of company’s website.
2. I get a message ‘Incorrect Username or Password’.
3. I hit ‘Forgot your Password’ and enter my email address,
4. I receive an email> click on the link > and go straight into the admin section and I can amend/add/delete all editable content all day long if I wish.
5. If I go ‘My Account’ and change password and Save and then log out I cannot get back in. I get the same message ‘Incorrect Username or Password’ and go through the same procedure > ‘Forgot your Password’ > enter my email address > Click link sent > straight into the admin section of the website. I want to get out of this seemingly never ending loop.
6. I get a message ‘Incorrect Username or Password’.

This is the same procedure even if I ask MODX to automatically choose my password. It still doesn’t let me on the website with the password MODX has selected for me - bizarre.

Any ideas?

I also tried to add a New User but they get exactly the same issue but they don’t get the option of receiving an email to re-set the auto-generated password.

Thank you

Yours in frustration
David, Leicester, England

When you add yourself as a user, do you assign yourself to a group as well?

And are we talking about Revolution or Evolution here?

Hi
Thank you for your reply.

I myself have always been a User from Day One but up to now I've entered ModX using my bookmarked company website admin page for which the password has always been remembered via Firefox browser. I am not assigned to a Group as far as I'm aware.

The New User I am trying to add will not be added to a group unless that is required to enable her to login.

Revolution or Evolution?
Not sure.... It says MODx version 0.9.6.2 Version codename rev 4077. Would that suggest Revolution?

David

MODx version 0.9.6.2 is a very old (Evolution) version of MODx and has security issues that have been dealt with with later versions.

You need to update to 1.0.8 ASAP before you do anything else.

Ok thank you.

But that is unfortunaly outside my area of expertise and therefore control - and the guys who set it up have long gone!

Just need to convince the Directors we should just start again with a new website - the one we have is rubbish anyway.

Thanks to all.

The least you need to do then is disable or upgrade the "Forgot Manager Plugin" as early versions of this had a security flaw

To disable:

Go to Elements > Plugins

Click on "Forgot Manager Plugin"

Then click "Plugin Disabled"

But it sounds like this is your only way of getting in...

And if you can't get in you can't enable it to get in!

You can re-enable it each time you get in by enabling it in the database

in the table [Something]_site_plugin ( where [Something] is probably "modx" ) and updating the disabled field for the plugin

To upgrade

The latest version is here http://modx.com/extras/package/forgotmanagerlogin
but it says it requires Evolution 1.0.x or greater so you might be out of luck

But your site is at risk of being hacked without action.

Mike