Menu

FAQs

This article was last updated 37 days ago, please note whether the content is still available

Password Reset

Z-BlogPHP Password Recovery Tool: https://bbs.zblogcn.com/thread-83419.html

Warning: nologin.php is very dangerous, be sure to delete it immediately after use.

Warning 2: nologin.php is very dangerous, be sure to delete it immediately after use.

Warning 3: nologin.php is very dangerous, be sure to delete it immediately after use.

Upgrading to 1.7.3.3260 Results in Back-end Login Error

After upgrading to 1.7.3.3260, you may encounter a back-end login error (indicating non-legal access, CAPTCHA not displayed, CAPTCHA error).

This is due to the addition of two security features in 1.7.3.3260 to protect back-end login. Due to the incompatibility of theme plugins or other reasons, the function may not work properly. You can cancel the CSRF protection or CAPTCHA function, or both, in option.php.

  • Modify the file using the space panel's file management or FTP: path/zb_users/c_option.php

  • Configuration:

    // Close CSRF protection functionality (Please close if login is not legal)
    'ZC_LOGIN_CSRFCHECK_ENABLE' => false,
    
    // Close CAPTCHA functionality (Please close if CAPTCHA error)
    'ZC_LOGIN_VERIFY_ENABLE'    => false,

path: the path where the blog program is installed, e.g. /home/wwwroot/www.zblogcn.com

Warning: Do not disable these two features perpetually, as they can effectively defend against attacks from hackers scanning for account cracking. If the incompatibility issue of theme plugins has been fixed, please restore these two features.

Warning 2: If you have enabled the enhanced security functionality in the back-end settings but cannot log in, you can follow the steps to log in and disable the security feature, then delete these two settings.

Enabling the Fixed Domain Function

  • Modify the file using the space panel's file management or FTP: path/zb_users/c_option.php

  • Configuration:

    'ZC_PERMANENT_DOMAIN_FORCED_URL' => "https://www.newdomin.site/",

path: the path where the blog program is installed, e.g. /home/wwwroot/www.zblogcn.com

Warning: If you are running a version prior to 1.6.0, please replace the 1.6.0 package (zb_system).

Warning 2: ZC_PERMANENT_DOMAIN_FORCED_URL is used to forcibly enable the fixed domain and specify the fixed domain.

Error with Fixed Domain Unable to Login

  • Modify the file using the space panel's file management or FTP: path/zb_users/c_option.php

  • If the fixed domain has failed, you need to close the fixed domain function. Please add the following project to c_option.php:

    'ZC_PERMANENT_DOMAIN_ENABLE' => false, //1.7.3 versions and later use
    
    // or 
    
    'ZC_PERMANENT_DOMAIN_WHOLE_DISABLE' => true, // 1.7.2 and earlier versions using


    If the domain fixed and forced via ZC_PERMANENT_DOMAIN_FORCED_URL,is, delete the ZC_PERMANENT_DOMAIN_FORCED_URL => 'domain' configuration.

    The fixed domain function will be bypassed, and you can access your website with the correct domain.

  • If the previously configured fixed domain cannot access, please change it to the correct domain.

    'ZC_PERMANENT_DOMAIN_FORCED_URL' => "https://正正的域名/",
    #If you do not want to use the fixed domain again, delete this row in option.php

path: the path where the blog program is installed, e.g. /home/wwwroot/www.zblogcn.com

Warning: If you are running a version prior to 1.6.0, please upgrade to 1.6.0 first.

Forcing Debug Mode On

The standard method to enable debug mode is in the back-end settings. However, if the website program fails, you can use the following method in version 1.7.3 and later:

Modify the file using the space panel's file management or FTP: path/zb_users/c_option.php

 'ZC_DEBUG_MODE' => true, // Enable Debug, please delete this row after debugging

path: the path where the blog program is installed, e.g. /home/wwwroot/www.zblogcn.com

For version 1.7.2, please modify zb_system\function\c_system_base.php by canceling the comments on the 22nd line:

// defined('ZBP_DEBUGMODE') || define('ZBP_DEBUGMODE', true);
// modify to: 
defined('ZBP_DEBUGMODE') || define('ZBP_DEBUGMODE', true);

User Level Definition

'user_level_name' => array(
    '1' => 'administrator',
    '2' => 'website editor',
    '3' => 'author',
    '4' => 'co-author',
    '5' => 'commenter',
    '6' => 'visitor',
),

Emoji Emotion Support

utf8 is not a standard UTF-8utf8mb4

Since "Z-BlogPHP 1.7.0", the default implementation uses utf8mb4 encoding to create tables.

If the database is already inhabited, you can follow these steps to modify:

  1. Enter phpMyAdmin or other database management tools.

  2. Select the corresponding database (default "structure" view).

  3. Click the "operation" tab and change the "sorting rule" to utf8mb4_general_ci.

  4. Click "apply" to apply to all tables and all table fields!

Hidden Errors

Even with debugging mode enabled, some errors will not be displayed on the page;

By default, the HTML source code at the end of the front and back-end pages contains the following comments:.


Specific errors (if non-zero) are recorded in the zb_users\logs\ folder;

You can empty this folder and re-access the operation to record the latest log and facilitate troubleshooting;

Revoking Root-Level Administrator Privileges

Root-level administrators have the highest system permissions, allowing them to upload apps, export apps, delete apps, and update the system.

After revoking root-level administrator privileges, they will no longer be able to install new apps, delete apps, export apps, and update the system.

  • Enable Application Center Client in security mode

This is the simplest and quickest way to prevent uploading new apps, exporting apps, and system updates.

  • Revoke root-level administrator privileges

In Z-BlogPHP version 1.7.3 and above, you can use the .env file:

  1. In the system directory, place a .env file and add the following code:

ZBP_PRESET_DISABLE_ROOT=1

In Z-BlogPHP version 1.7.2 and above, you can use one of the following three methods:

  1. Modify c_system_base.php and add the following code:

define('ZBP_PRESET_DISABLE_ROOT', 1);

  1. Modify the php-fpm configuration file, add the following code, and restart php-fpm:

env[ZBP_PRESET_DISABLE_ROOT]=1

  1. Modify the nginx configuration file, in the location ~ \.php$ {} section, add the following code, and restart nginx:

fastcgi_param  ZBP_PRESET_DISABLE_ROOT  1;

Helpful?

Comments(3)

剑影孤鸿
剑影孤鸿

2025-10-09 16:17:43

“详尽介绍了Z-BlogPHP的密码找回、后台登录错误处理、固定域名功能、调试模式、用户等级、Emoji表情支持、错误查看及管理员权限管理等高级操作。”
剑影江湖客
剑影江湖客

2025-10-09 13:52:35

详细介绍了Z-BlogPHP的密码找回、后台登录错误处理、域名设置、调试模式、用户等级、Emoji支持、错误查看和root权限管理等多方面功能与问题解决方法。
风语无痕
风语无痕

2025-10-09 13:50:55

提供Z-BlogPHP密码找回工具及相关安全设置指导,包含升级问题解决和功能优化建议。

Post comment

Support Live Chat
TOP