User Side kills admin Session.

[Wayne Luke]

This is a verifiable bug...

Logging into the Admin Control Panel then reloading any page on the User Side, resets your Admin Session requiring you to log into the admin control panel the next time you try to do something.

Furthermore, when relogging into the admin control panel, it doesn't always take you back to the exact page you were viewing. For instance if you change some settings under General Options and click submit, not only are your changes lost but you go back to the main setting page.

[Kier]

I can't verify this. I just logged into beta.jelsoft.com and browsed around for a bit, then opened a new window and logged into the ACPm browsed around for a while and then went back to the user-side, hit refresh and loaded a few pages, then went back to the ACP and all the links were fine...

Are you seeing a sessionhash being passed through your URLs on the user side?

[Chen]

I can verify this. I don't see session hashes anywhere, but maybe the reason it worked for you is because you're using multiple windows? If I only keep one open, and change between the admin CP to the user side and then back to the CP I'm asked to log in again. Before the test, I was already logged in at the user side, then went to the CP where I had to log in (normal I suppose).

[Kier]

You are trying to do it in a single window? As soon as you close the control panel window, either by closing it or by opening another page into the same window, your admin session is deleted. This is the intended behaviour.

[Wayne Luke]

I can't verify this. I just logged into beta.jelsoft.com and browsed around for a bit, then opened a new window and logged into the ACPm browsed around for a while and then went back to the user-side, hit refresh and loaded a few pages, then went back to the ACP and all the links were fine...

Are you seeing a sessionhash being passed through your URLs on the user side?


No, I don't use Sessionhashes.. I prefer to use cookies instead which is the default behavior isn't it?

[Wayne Luke]

No... it is separate windows.

Here is what I do:
1. Log into Admin Control Panel
2. Click "View Your Forums"
3. Click any link in the left navigation menu.
4. Relog in.

Even keeps the same sessionhash in the AdminCP.

[Chen]

That I can't verify... have you tried deleting all cookies on that domain name?

[Kier]

Logged in to beta.jelsoft.com/admincp/ Clicked 'Go to your Forums Home Page' in the top frame (beta.jelsoft.com/index.php opens in new window) Clicked 'Style Manager' in control panel left frame Style manager loads.Anything else I can try?

[Me2Be]

I can't verify it either Wayne, it seems to work on my sites

[Wayne Luke]

Well it has been doing it for me since the beta started. I mentioned it before.

As to deleting cookies on the domain, there were none until yesterday when I did a clean BETA 3 install on a new computer that never had vBulletin on it before.

[Wayne Luke]

Have you tried it in a browser other than Internet Explorer?

It happens in Mozilla, Firebird in Windows and Linux as well as in Konqueror. I guess, I will just remove the feature that makes logging into the ACP required like I have on every other Beta version before this.

[Kier]

I just performed the same steps in Mozilla and Opera and had no problems. Sorry.

[Wayne Luke]

I guess it is just related to my computers then... It has happened to me on 4 different vBulletin based sites though.

Like I said, I will just remove the user checking for the Admin CP like I did for beta 1 and beta 2. It isn't usable to me otherwise.

[fury]

I get this problem whenever I go to a page on the user side that has a sessionhash in the query string.

[rylin]

I guess it is just related to my computers then... It has happened to me on 4 different vBulletin based sites though.

Like I said, I will just remove the user checking for the Admin CP like I did for beta 1 and beta 2. It isn't usable to me otherwise.
any chance we could get this as an option? :)

[Freddie Bingham]

An option to allow anyone to get into the admincp?

[Wayne Luke]

I wouldn't recommend it. I do all my development on a server behind a firewall and not accessible to the Internet. I then upload the database changes directly to the online system because of this issue.

Real pain in the butt but the only why that this would be secure.

[rylin]

Must've interpreted it the wrong way.
Basically, if I log onto the forums, then click the admincp link, I have to log in again.

Could this be made optional behavior? :o

[Boofo]

No... it is separate windows.

Here is what I do:
1. Log into Admin Control Panel
2. Click "View Your Forums"
3. Click any link in the left navigation menu.
4. Relog in.

Even keeps the same sessionhash in the AdminCP.

I have noticed this happening on my system as well. I guess we must be lucky, huh, Wayne? ;)

[DWZ]

I have this problem when playing around with styles. I open up two windows, the home page and the admin cp.

I edit a template and hit refresh on the other window which works fine. When I find it didn't work, I click the template again in the second window and then it asks for my username/password

[UHN_ED]

Must've interpreted it the wrong way.
Basically, if I log onto the forums, then click the admincp link, I have to log in again.

Could this be made optional behavior? :o

Thats a security feature. Its good in case you even log off of a computer and someone goes to your forums and has your account still logged in. Good especially if you have other admins, since you can't stop what they do.

[SiXXGuNNZ]

here is the login problem I have

all cookies cleared, etc.

[Boofo]

here is the login problem I have

all cookies cleared, etc.

That happened to me, too. When I logged in to both of them the problem went away and has not returned.

[Chris M]

That happened to me, too. When I logged in to both of them the problem went away and has not returned.
This also happens to me Wayne...

Satan

[rylin]

Thats a security feature. Its good in case you even log off of a computer and someone goes to your forums and has your account still logged in. Good especially if you have other admins, since you can't stop what they do.
I'm aware of this.
It would, however, be nice if it was made optional.

Otherwise, it'll just be a one minute hack anyway, but I'm sure there's a bunch of people annoyed by this feature.

[charmer]

That was happening to me also yesterday - the relogging, the 2 frames with the log in panel, and having to relog everytime I modify something.

However now it is working perfect o.O

And I don't have my FTP client open/connected - maybe that has something to do with it

[BobbiX]

I can verify this happening randomly from time to time - sometimes everything works fine, sometimes it doesn't ! What I just noticed however, my cookie looks like this :

; ; bbadminsession=1;.....

Might it be a problem that there are two sessionhash vars ? Please look into this !

[Cloudrunner]

That happened to me, too. When I logged in to both of them the problem went away and has not returned.
That image looks to be a problem with the cookies, are you using them as a base .yourdomain.com with the dir as /?

if so and you are running multiple domains, then the cookies conflict on the directory side. I noticed this when I ran cookied sites (vbulletin and non) with the directories both set to /. The fix I found was to give the directories different names (i.e. /forums/) and to subdirectory the cookies, (i.e. www.yourdomain.com (http://www.yourdomain.com), forums.yourdomain.com, etc). That fixed it for me.

These complaints seem to me like the old cookie problem that occured early in the beta when running both the beta and the stable versions on the same domain.

My two cents.

[squall14716]

That image looks to be a problem with the cookies, are you using them as a base .yourdomain.com with the dir as /?

if so and you are running multiple domains, then the cookies conflict on the directory side. I noticed this when I ran cookied sites (vbulletin and non) with the directories both set to /. The fix I found was to give the directories different names (i.e. /forums/) and to subdirectory the cookies, (i.e. www.yourdomain.com (http://www.yourdomain.com), forums.yourdomain.com, etc). That fixed it for me.

These complaints seem to me like the old cookie problem that occured early in the beta when running both the beta and the stable versions on the same domain.

My two cents.
The last post in the thread dates back to June 16th. That is 3 days after Beta 3 a.k.a. vB3 Public Beta was released.

[Freddie Bingham]

Is anyone still having this problem with Beta 7?

[Fusion]

Looks more like a user replying to an oldish thread. A quick search didn't turn out any similar threads of more recent origin.

[SiXXGuNNZ]

Is anyone still having this problem with Beta 7?
sorry about the delay, I have no more problems since beta 7

[SmEdD]

Alot of people would most likly want this to be one :)

I have had this problem before but I donno how I got it. I only had it once or twice.

Also if you log out of the user end it shouldn't log out of the admin end, that makes it impossible to check what guests see when doing templates.