Announcement

Collapse
No announcement yet.

Upgraded to 3.8.4 PL2, users are reporting cookie type issues

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • #16
    I and my users are getting the same problem
    I've changed the prefix from the standard BB to UOF, cleared my cookies and it works fine in Firefox
    IE8 however, still doesn't stay logged in.

    Comment


    • #17
      Its happening to me, straight after I upgraded, can someone post a fix please - Thanks

      Comment


      • #18
        any solusion please ???

        Comment


        • #19
          Ditto - I've tried everything that everyone's suggested here (which amounts to 'clear your cookies') and suffice to say that there's SOMETHING going on. Can someone please either post a solution, or at least let us know that the issue is being worked on?

          Comment


          • #20
            Looking into it.

            Comment


            • #21
              I can reproduce the behavior exactly as described.
              The behavior I'm looking at is:
              1) User logs in, clicking remember me
              2) Salt string changes (upgrading to PL2 causes this).
              3) User is logged in
              4) Session times out (or session cookie manually removed)
              5) User is logged out, despite having clicked remember me.
              6) User logs in again, clicks remember me.
              7) User is logged in.
              8) Session times out (or session cookie manually removed)
              9) User is logged in.

              I'm working with FF3.5.6 at the moment, which was one of the reported problem browsers. This is the expected behavior from the code.

              Comment


              • #22
                Originally posted by Kevin Sours View Post
                This is the expected behavior from the code.
                Hi Kevin, do you mean that the code is written to keep logging us out! How might it be corrected. Thanks

                Comment


                • #23
                  When I re-logged after being kicked out of Forum - I always ticked the box "Remember me". That did not work after applying the patch.
                  Strangely enough - after 3-4 days after applying the patch - the self logouts stopped, although I did nothing. The users also stopped complaining of this problem. I use Opera v10.10. The problem was universal on all browsers. I repeat, it now stopped doing this. There is no timeouts since it is set NOT to timeout. Before the patch - there were now timeouts either. It appeared only with the PL2. And now strangely disappeared.

                  Comment


                  • #24
                    Hi Doka, I hope it stops for me soon too, my members are getting pretty vexed about the issue.

                    Comment


                    • #25
                      Originally posted by jimjam View Post
                      Hi Kevin, do you mean that the code is written to keep logging us out! How might it be corrected. Thanks
                      No. However changing the cookiesalt will invalidate the "remember me" cookies. This shouldn't affect anybody with an active session, but once the session expires attempts to create a new session using the "remember me" feature will fail. Logging in again (and clicking remember me) should create new "remember me" cookies and everything should work. This is the behavior I am seeing from this end in both FF and IE against 4.0 and 3.8.

                      jimjam, if you want to post or PM a link to your site I will attempt to register and see what I can see there.
                      Kevin

                      Comment


                      • #26
                        Surely the remember me box is optional?

                        Someone might be using a public PC?

                        Comment


                        • #27
                          I am getting fewer reports now, I think the main reason for these problems is members not clearing cookies properly or at all. If you have 10,000 members and only a small percentage ignore your requests to clear them then that results in a lot of emails saying "I can't log in"

                          Did I read that we are going to have to go though a cookie salt change every upgrade point! :-(

                          Comment


                          • #28
                            Originally posted by jimjam View Post
                            Did I read that we are going to have to go though a cookie salt change every upgrade point! :-(
                            That's going to get changed. I'm still not sure what's going on because you shouldn't need to clear your cookies. Just logging in again has worked every way I've tried it.
                            Kevin

                            Comment


                            • #29
                              I still have some users who swear they have cleared cookies, ticked "remember me" and are still having to log in each time they visit.

                              Comment


                              • #30
                                Originally posted by jimjam View Post
                                I still have some users who swear they have cleared cookies, ticked "remember me" and are still having to log in each time they visit.
                                Can you give me a clearer picture of the problematic behavior? When you mean "log in each time they visit" do they have trouble logging in/staying logged in for a particular visit (say 20-30 minutes of browsing the site) or is it more a situation of logging in today with "remember me" and coming back tomorrow and being logged out? Also note that if they are clearing cookies after they log in again it will obviously log them not (not saying they are doing that, just covering all bases because this isn't making sense to be me yet).
                                Kevin

                                Comment

                                widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
                                Working...
                                X