Re: [Open-Source-CAD] TicketsCAD login issue

[Shawn Stoddard]

Try using MySQL version 7. I seem to recall some issues with MD5. It’s not considered secure for passwords any longer. MySQL may have depreciated it, but I’m having a tough time finding that clearly documented. 

On Sun, Jul 14, 2024, at 08:40, Khalaf Almazrouei wrote:

Absolutely! Here's a revised message to the community that's more informative and likely to get helpful responses:

Revised Message

Hello everyone,

I hope you're all doing well. I've successfully installed TicketsCAD, but I'm running into a problem when trying to log in.

The Issue:

When I try to log in as either the "admin" user or the "guest" user, I get this SQL error:

An error occurred in function '': 'mysql query failed' Error occurred in 'login.inc.php' at line '263' Additional info: 'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '('ADMIN') OR `passwd`=MD5('admin') OR `passwd`=MD5('ADMIN')) LIMIT 1' at line 3' Check your MySQL connection and if the problem persists, contact the author. Execution stopped.

My Setup:

• Hosting: cPanel cloud-based Linux server
  
• PHP version: 7.0 (set via Multiple PHP)
  
• MySQL Server version: 8.0.36-cll-lve (MySQL Community Server - GPL)
  
• phpMyAdmin version: 5.2.1
  

--

You received this message because you are subscribed to the Google Groups "Open Source CAD" group.

To unsubscribe from this group and stop receiving emails from it, send an email to open-source-c...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/open-source-cad/914e8698-db7d-4680-b1b8-41b0855d75bcn%40googlegroups.com.

[Khalaf Almazrouei]

Hi Shawn thanks for your support, I will try to change it and see if it works. Along with that in the meantime I will try to install XAMPP and host temproarey to see 

Do you have any recomnded shared webhosting or VPS to host the CAD system, if so can you please let me know what are the compney names 

[Shawn Stoddard]

Sadly I don’t. I have always self-hosted on Windows behind IIS or on Linux behind NGINX.

To view this discussion on the web visit https://groups.google.com/d/msgid/open-source-cad/6f4f2595-b877-4cd4-b5df-5a0fcbcf00edn%40googlegroups.com.

[Khalaf Almazrouei]

Quick Question is my SQL 5.7 stable or stable with the latest version or the recommendation would be 7.0

[Khalaf Almazrouei]

Thanks Shawn for the update I will try to see if I can host it with my synology system and I hope that in the fuetaer they can update the core to support mysql verison 8.0+

[Khalaf Almazrouei]

✅ Fixed: SQL Syntax Error in login.inc.php on MySQL 8.0 (Shared Hosting)

Hi everyone,
I hope you're all doing well. If you're facing the same error I encountered when running Tickets CAD on a shared hosting environment, here's how I resolved it.

---

❌ Error Message: An error occurred in function '': 'mysql query failed' Error occurred in 'login.inc.php' at line '263' Additional info: 'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '('ADMIN') OR `passwd`=MD5('admin') OR `passwd`=MD5('ADMIN')) LIMIT 1' at line 3' Check your MySQL connection and if the problem persists, contact the author. Execution stopped.

---

✅ Hosting Environment:

• Hosting: cPanel-based Linux shared hosting

• PHP Version: 7.4 (configured via MultiPHP Manager)

• MySQL Server Version: 8.0.36-cll-lve (MySQL Community Server - GPL)

• phpMyAdmin Version: 5.2.1

---

🔧 Root Cause:

The original SQL query in login.inc.php was using:

• Improper syntax and unmatched parentheses

• A reserved MySQL keyword user without backticks

• Deprecated functions like PASSWORD() (which is removed in MySQL 8.0+)

---

✅ Fix:

I resolved the issue by replacing the broken query at line 263 in login.inc.php with the following:

$query = "SELECT * FROM `" . $GLOBALS['mysql_prefix'] . "user` WHERE `user` = " . quote_smart($_POST['frm_user']) . " AND ( `passwd` = MD5('" . strtolower($_POST['frm_passwd']) . "') OR `passwd` = MD5('" . $_POST['frm_passwd']) . "') ) LIMIT 1";

---

🟢 Result:

This corrected the SQL syntax and allowed the login process to work correctly with MySQL 8.0 and PHP 7.4 without needing to downgrade or change hosting.

Hope this helps others facing the same issue!

---

[Jeff Carrier]

Appreciate you sharing this!!!  Many times folks get help/support (on many various forums) and likely correct their issue but rarely reply that the issue was resolved and how it was resolved.

To view this discussion visit https://groups.google.com/d/msgid/open-source-cad/603531e9-5d4b-41b1-b3bf-2bbbd5772924n%40googlegroups.com.