[Tim Hensel]

In a panic a bit .... Suddenly my admin panel is telling me 'The IP was blocked after 5 unsuccessful logins'.

Actually I had only logged in once this morning into my store ... I was doing some work and the only main change I made was I disabled the 'Send to Friend Product Page Add-on'... Roughly 30 minutes went by after doing anything, and suddenly the The IP was blocked after 5 unsuccessful logins is appearing!??

I have a fiber optic designated IP address so no other computers can use it...and I am the only one here right now (unless my cat was trying to login).

My own store decided to lock me out!!?!?
I have no problem logging into my account through the customer side and the store is still running fine...just the admin side locked me out.

[Tim Hensel]

I got a little smart after the freaking out stopped and when into the database ... In the table `cscart_access_restriction` there was one record but it was not my IP address in the IP From / IP To fields (unless it is encoded??). But I deleted that record and suddenly I could access my store again.

I do not know what happened since I was not having any unsuccessful logins earlier... but it looks like deleting that record fixed it.

-Tim

[Tim Hensel]

Wow this happened again this morning. Clicking through my store and suddenly 'The IP was blocked after 5 unsuccessful logins'.
Again in the database, not my IP address showing and have no idea what this error is.
Last time this happened was looks like March 29th, 2012 ... now November 6th, 2012... strange.

[CS-Cart team]

Hello Tim,

Thank you for your message.

It is really strange to hear that you have experienced this problem if you are telling that nobody can log in to your CS-Cart admin panel with using the same IP address. If you wish, we (technical support engineers) can examine this issue in your store in detail. Please contact us via Customer Help Desk and provide temporary access to your server by clicking on the Add record link on the Access information page of your Help Desk account so that we could examine the issue.

Thank you.

---
Pavel Zyukin
CS-Cart Support team

[cmund]

Anyone know the solution to this problem besides altering the database? I am having the same issue. I was logged in at the time was merely checking my stats.

Thanks,
cmund

[Tim Hensel]

I don't know if it works the same in 2.2.5 as what you have (CS-Cart 4.0.3) but they only way I could find was to delete the record that shows in the `cscart_access_restriction` table. It seems if someone is having trouble logging in or remembering their password and they get temporarily blocked, it can also block the admin side...even if a completely different IP address than the one being restricted.

[cmund]

Thanks Tim for your reply. I just bit the bullet and used some support credits because I didn't want to mess with my tables. The quick fix was to adjust my log-in attempts higher than 3. I wasn't logging in at time that it happened so I have asked for a further investigation of the problem. If I get some further answer, I will post it to help anyone else out that might need it.

[Mongoose]

Thanks Tim for your reply. I just bit the bullet and used some support credits because I didn't want to mess with my tables. The quick fix was to adjust my log-in attempts higher than 3. I wasn't logging in at time that it happened so I have asked for a further investigation of the problem. If I get some further answer, I will post it to help anyone else out that might need it.

 

Has been a while but cmund never posted what the support desk of CS Cart came up with. Shame issue still relevant

[johnbol1]

I have a teamviewer account linked to my work PC, so I can always log in to that admin and unblock remotely if needs be, though I dont have ip restrictions any more.

Of course wont work if you have log in from only 1 ip address so best make it log in from a backup ip address in this case.

[Mongoose]

I have a teamviewer account linked to my work PC, so I can always log in to that admin and unblock remotely if needs be, though I dont have ip restrictions any more.

Of course wont work if you have log in from only

1 ip address so best make it log in from a backup ip address in this case.

 

Hi John, I have this setup as well however I used a VPN to connect to the admin panel to the store and this should NOT work but it did. I should not have access to my store admin panel using a VPN.

 

[jeffshead]

WOW! I can't believe this issue is still going on. I haven't been using my cart for a long time. Today, I decided to upgrade from 4.5.1 to the latest. Since updating, I'm blocked from the Admin panel even though my IP is in the table.

 

Has anyone been able to fix this? Some update... Now I have to keep the Access restrictions add-on disabled.

[eComLabs]

Use phpMyAdmin to clear data in tables starting from cscart_access_restriction

[CS-Cart team]

Please contact us via Help desk and provide access to your server so that we could examine the issue.

 

WOW! I can't believe this issue is still going on. I haven't been using my cart for a long time. Today, I decided to upgrade from 4.5.1 to the latest. Since updating, I'm blocked from the Admin panel even though my IP is in the table.

 

Has anyone been able to fix this? Some update... Now I have to keep the Access restrictions add-on disabled.

[jeffshead]

Use phpMyAdmin to clear data in tables starting from cscart_access_restriction

Thanks. I did that, early on, to regain access but I have to either keep the add-on disabled or untick the option that restricts IP's for the admin page.

 

Please contact us via Help desk and provide access to your server so that we could examine the issue.

 

Thanks. Did that.

[tbirnseth]

I don't think IP's are automatically added so the question is "how is yours getting into the table?"

[jeffshead]

I don't think IP's are automatically added so the question is "how is yours getting into the table?"

The current IP is automatically added according to the docs:

"When you enable this option, your current IP-address is automatically added to the list of allowed IP-addresses"

[tbirnseth]

The current IP is automatically added according to the docs:

"When you enable this option, your current IP-address is automatically added to the list of allowed IP-addresses"

I meant to dis-allow.

[jeffshead]

I meant to dis-allow.

I searched the entire database for the IP address that I am using to access the admin page as well as the PHP ip2long version of it but the only places that I find either, are in the following tables:

• cscart_access_restriction (PHP ip2long version)
• cscart_logs
• cscart_sessions
• 
  

Maybe the add-on is not using ip2long for both adding and checking the database???

UPDATE: If I use a proxy to access the CS-Cart admin panel and re-enable everything in the Access Restrictions add-on, I can still access the admin panel via the proxy. The proxy IP address is auto added to the Allowed IP's list. However, even though my local IP address was added earlier, it's still blocked.

[Mongoose]

I searched the entire database for the IP address that I am using to access the admin page as well as the PHP ip2long version of it but the only places that I find either, are in the following tables:

• cscart_access_restriction (PHP ip2long version)
• cscart_logs
• cscart_sessions
•  

Maybe the add-on is not using ip2long for both adding and checking the database???

UPDATE: If I use a proxy to access the CS-Cart admin panel and re-enable everything in the Access Restrictions add-on, I can still access the admin panel via the proxy. The proxy IP address is auto added to the Allowed IP's list. However, even though my local IP address was added earlier, it's still blocked.

 

 

 

Do you run perhaps Nginx as a proxy in combo with Apache ?? That surely is the reason why I was banned from not only my admin panel but also the storefront. I was given a workaround by CS Cart Support.

[jeffshead]

Do you run perhaps Nginx as a proxy in combo with Apache ?? That surely is the reason why I was banned from not only my admin panel but also the storefront. I was given a workaround by CS Cart Support.

You may have something there. I am behind a web application firewall. What was the workaround that they provided?