Upgraded to 3.8.4 PL2, users are reporting cookie type issues

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Deimos
    Senior Member
    • Oct 2002
    • 1517
    • 3.8.x

    #16
    I and my users are getting the same problem
    I've changed the prefix from the standard BB to UOF, cleared my cookies and it works fine in Firefox
    IE8 however, still doesn't stay logged in.

    Comment

    • jimjam
      Senior Member
      • Jul 2007
      • 217
      • 3.6.x

      #17
      Its happening to me, straight after I upgraded, can someone post a fix please - Thanks

      Comment

      • 3BeiDaT
        New Member
        • Dec 2009
        • 3
        • 3.8.x

        #18
        any solusion please ???

        Comment

        • Chuck Holton
          Member
          • Feb 2008
          • 53
          • 3.6.x

          #19
          Ditto - I've tried everything that everyone's suggested here (which amounts to 'clear your cookies') and suffice to say that there's SOMETHING going on. Can someone please either post a solution, or at least let us know that the issue is being worked on?

          Comment

          • Kevin Sours
            Lead Developer
            • Apr 2008
            • 601
            • 5.5.x

            #20
            Looking into it.

            Comment

            • Kevin Sours
              Lead Developer
              • Apr 2008
              • 601
              • 5.5.x

              #21
              I can reproduce the behavior exactly as described.
              The behavior I'm looking at is:
              1) User logs in, clicking remember me
              2) Salt string changes (upgrading to PL2 causes this).
              3) User is logged in
              4) Session times out (or session cookie manually removed)
              5) User is logged out, despite having clicked remember me.
              6) User logs in again, clicks remember me.
              7) User is logged in.
              8) Session times out (or session cookie manually removed)
              9) User is logged in.

              I'm working with FF3.5.6 at the moment, which was one of the reported problem browsers. This is the expected behavior from the code.

              Comment

              • jimjam
                Senior Member
                • Jul 2007
                • 217
                • 3.6.x

                #22
                Originally posted by Kevin Sours
                This is the expected behavior from the code.
                Hi Kevin, do you mean that the code is written to keep logging us out! How might it be corrected. Thanks

                Comment

                • Doka
                  New Member
                  • Dec 2008
                  • 7

                  #23
                  When I re-logged after being kicked out of Forum - I always ticked the box "Remember me". That did not work after applying the patch.
                  Strangely enough - after 3-4 days after applying the patch - the self logouts stopped, although I did nothing. The users also stopped complaining of this problem. I use Opera v10.10. The problem was universal on all browsers. I repeat, it now stopped doing this. There is no timeouts since it is set NOT to timeout. Before the patch - there were now timeouts either. It appeared only with the PL2. And now strangely disappeared.

                  Comment

                  • jimjam
                    Senior Member
                    • Jul 2007
                    • 217
                    • 3.6.x

                    #24
                    Hi Doka, I hope it stops for me soon too, my members are getting pretty vexed about the issue.

                    Comment

                    • Kevin Sours
                      Lead Developer
                      • Apr 2008
                      • 601
                      • 5.5.x

                      #25
                      Originally posted by jimjam
                      Hi Kevin, do you mean that the code is written to keep logging us out! How might it be corrected. Thanks
                      No. However changing the cookiesalt will invalidate the "remember me" cookies. This shouldn't affect anybody with an active session, but once the session expires attempts to create a new session using the "remember me" feature will fail. Logging in again (and clicking remember me) should create new "remember me" cookies and everything should work. This is the behavior I am seeing from this end in both FF and IE against 4.0 and 3.8.

                      jimjam, if you want to post or PM a link to your site I will attempt to register and see what I can see there.
                      Kevin

                      Comment

                      • Bounce
                        Senior Member
                        • Feb 2005
                        • 640
                        • 4.2.x

                        #26
                        Surely the remember me box is optional?

                        Someone might be using a public PC?

                        Comment

                        • jimjam
                          Senior Member
                          • Jul 2007
                          • 217
                          • 3.6.x

                          #27
                          I am getting fewer reports now, I think the main reason for these problems is members not clearing cookies properly or at all. If you have 10,000 members and only a small percentage ignore your requests to clear them then that results in a lot of emails saying "I can't log in"

                          Did I read that we are going to have to go though a cookie salt change every upgrade point! :-(

                          Comment

                          • Kevin Sours
                            Lead Developer
                            • Apr 2008
                            • 601
                            • 5.5.x

                            #28
                            Originally posted by jimjam
                            Did I read that we are going to have to go though a cookie salt change every upgrade point! :-(
                            That's going to get changed. I'm still not sure what's going on because you shouldn't need to clear your cookies. Just logging in again has worked every way I've tried it.
                            Kevin

                            Comment

                            • jimjam
                              Senior Member
                              • Jul 2007
                              • 217
                              • 3.6.x

                              #29
                              I still have some users who swear they have cleared cookies, ticked "remember me" and are still having to log in each time they visit.

                              Comment

                              • Kevin Sours
                                Lead Developer
                                • Apr 2008
                                • 601
                                • 5.5.x

                                #30
                                Originally posted by jimjam
                                I still have some users who swear they have cleared cookies, ticked "remember me" and are still having to log in each time they visit.
                                Can you give me a clearer picture of the problematic behavior? When you mean "log in each time they visit" do they have trouble logging in/staying logged in for a particular visit (say 20-30 minutes of browsing the site) or is it more a situation of logging in today with "remember me" and coming back tomorrow and being logged out? Also note that if they are clearing cookies after they log in again it will obviously log them not (not saying they are doing that, just covering all bases because this isn't making sense to be me yet).
                                Kevin

                                Comment

                                widgetinstance 262 (Related Topics) skipped due to lack of content & hide_module_if_empty option.
                                Working...