Weird authentication popup coming up on my Drupal 6 site
Hi everyone, When I go to my Drupal 6 professional blog, http://awebfactory.com.ar , I get a popup (whether logged in or not) that says: "Authentication required" A username and password are being requested by http://dc2009.drupalcon.org. The site says: "drupalcon security lockdown" When I hit cancel, everything is OK, until I access another page and the same thing happens. It's Drupal 6, and I have just upgraded Drupal and all modules to latest release with no exceptions. I deleted the .htaccess and replaced it with a new one from the Drupal 6 release. But the weird popup continues. HEEEELLLLLPPPPP! Thanks, Victor Kane http://awebfactory.com.ar
You got an image in there that is pulled from dc2009.drupalcon.org: http://dc2009.drupalcon.org/sites/all/themes/dcdc/badges/badge_individual.gi... All of http://dc2009.drupalcon.org/ now requires authentication. I guess someone pulled that subdomain off. It's right above the Syndicate block in the sidebar. Jamie Holly http://www.intoxination.net http://www.hollyit.net On 1/13/2011 7:04 AM, Victor Kane wrote:
Hi everyone,
When I go to my Drupal 6 professional blog, http://awebfactory.com.ar , I get a popup (whether logged in or not) that says:
"Authentication required" A username and password are being requested by http://dc2009.drupalcon.org. The site says: "drupalcon security lockdown"
When I hit cancel, everything is OK, until I access another page and the same thing happens.
It's Drupal 6, and I have just upgraded Drupal and all modules to latest release with no exceptions. I deleted the .htaccess and replaced it with a new one from the Drupal 6 release. But the weird popup continues.
HEEEELLLLLPPPPP!
Thanks,
Victor Kane http://awebfactory.com.ar
Hello, It seems like an HTTP authentification... Verify if you have this in your .htaccess : AuthType Basic AuthName "drupalcon security lockdown" Require valid-user ... If yes, you should remove it. 2011/1/13 Victor Kane <victorkane@gmail.com>
Hi everyone, When I go to my Drupal 6 professional blog, http://awebfactory.com.ar , I get a popup (whether logged in or not) that says: "Authentication required" A username and password are being requested by http://dc2009.drupalcon.org. The site says: "drupalcon security lockdown" When I hit cancel, everything is OK, until I access another page and the same thing happens. It's Drupal 6, and I have just upgraded Drupal and all modules to latest release with no exceptions. I deleted the .htaccess and replaced it with a new one from the Drupal 6 release. But the weird popup continues. HEEEELLLLLPPPPP! Thanks, Victor Kane http://awebfactory.com.ar -- [ Drupal support list | http://lists.drupal.org/ ]
Right!!! Thanks so much! Victor On Thu, Jan 13, 2011 at 9:17 AM, Jamie Holly <hovercrafter@earthlink.net>wrote:
You got an image in there that is pulled from dc2009.drupalcon.org:
http://dc2009.drupalcon.org/sites/all/themes/dcdc/badges/badge_individual.gi...
All of http://dc2009.drupalcon.org/ now requires authentication. I guess someone pulled that subdomain off.
It's right above the Syndicate block in the sidebar.
Jamie Holly http://www.intoxination.net http://www.hollyit.net
On 1/13/2011 7:04 AM, Victor Kane wrote:
Hi everyone,
When I go to my Drupal 6 professional blog, http://awebfactory.com.ar , I get a popup (whether logged in or not) that says:
"Authentication required" A username and password are being requested by http://dc2009.drupalcon.org. The site says: "drupalcon security lockdown"
When I hit cancel, everything is OK, until I access another page and the same thing happens.
It's Drupal 6, and I have just upgraded Drupal and all modules to latest release with no exceptions. I deleted the .htaccess and replaced it with a new one from the Drupal 6 release. But the weird popup continues.
HEEEELLLLLPPPPP!
Thanks,
Victor Kane http://awebfactory.com.ar -- [ Drupal support list | http://lists.drupal.org/ ]
Looks like you have a banner or asset from the Drupalcon domain on your website somewhere. All of the old Drupalcon sites were locked down due to the SA regarding Webform. This should be another reminder for everyone out there to upgrade to a secure version of Webform immediately. -Mike __________________ Michael Prasuhn 503.512.0822 office mike@mikeyp.net http://mikeyp.net On Jan 13, 2011, at 4:04 AM, Victor Kane wrote:
Hi everyone,
When I go to my Drupal 6 professional blog, http://awebfactory.com.ar , I get a popup (whether logged in or not) that says:
"Authentication required" A username and password are being requested by http://dc2009.drupalcon.org. The site says: "drupalcon security lockdown"
When I hit cancel, everything is OK, until I access another page and the same thing happens.
It's Drupal 6, and I have just upgraded Drupal and all modules to latest release with no exceptions. I deleted the .htaccess and replaced it with a new one from the Drupal 6 release. But the weird popup continues.
HEEEELLLLLPPPPP!
Thanks,
Victor Kane http://awebfactory.com.ar -- [ Drupal support list | http://lists.drupal.org/ ]
Thanks to everyone, yes, an asset with the URL of the Drupalcon domain was the culprit. It was an image of individual sponsorship. Since it has long since disappeared, I forgot it was even there in the block of images on the right. Thanks to everyone for their prompt help, status: resolved! Victor "pair programming" rules! On Thu, Jan 13, 2011 at 2:30 PM, Michael Prasuhn <mike@mikeyp.net> wrote:
Looks like you have a banner or asset from the Drupalcon domain on your website somewhere. All of the old Drupalcon sites were locked down due to the SA regarding Webform. This should be another reminder for everyone out there to upgrade to a secure version of Webform immediately.
-Mike __________________ Michael Prasuhn 503.512.0822 office mike@mikeyp.net http://mikeyp.net
On Jan 13, 2011, at 4:04 AM, Victor Kane wrote:
Hi everyone,
When I go to my Drupal 6 professional blog, http://awebfactory.com.ar , I get a popup (whether logged in or not) that says:
"Authentication required" A username and password are being requested by http://dc2009.drupalcon.org. The site says: "drupalcon security lockdown"
When I hit cancel, everything is OK, until I access another page and the same thing happens.
It's Drupal 6, and I have just upgraded Drupal and all modules to latest release with no exceptions. I deleted the .htaccess and replaced it with a new one from the Drupal 6 release. But the weird popup continues.
HEEEELLLLLPPPPP!
Thanks,
Victor Kane http://awebfactory.com.ar -- [ Drupal support list | http://lists.drupal.org/ ]
-- [ Drupal support list | http://lists.drupal.org/ ]
participants (4)
-
Jamie Holly -
Maxime Gilbert -
Michael Prasuhn -
Victor Kane