phpBB • Free and Open Source Forum Software

I've tested cookies on four websites including localhost, and the _u , _k and _sid cookies all show expiration dates in 1970. It shouldn't be this value because $this->time is set to time() but it is. Later is session.php in the session_kill() function starting on line 926 there is some other set co...

"A phpBB ACP login which fails with a permissions error after successfully finishing the ACP login" does happen to be a symptom several "form invalid" customers also saw. Because if phpBB can't match you back to the same session again on your next visit, that can give you a "no permissions" on the ...

So if no max_autologin_time is set (value is 0), the cookie will expire in a year. But the cookie shows an expiration date in 1970. The Unix timestamp for 1970-01-19 14:37 is 1625820. Then it seems that in /phpbb/session.php , $this->time evaluates to 0 which it shouldn't because it is set to time()...

So I looked to see what cookies are created on localhost, and it's the same thing. Seems strange that the _u , _k and _sid cookies would all be set for a date in 1970. Any idea why this would be? I'm guessing it's to make these session cookies? Screen Shot 2020-07-10 at 3.15.45 PM.png This at least ...

It may be the cookie is a red herring. If would think if a cookie expires then it should not trigger a 401 error going into the ACP. Perhaps it has something to do with session management. Unfortunately, I can't seem to find a PHP error log for more clues, and there's nothing in phpBB's error log.

This board appears to be setting cookies awry. Tell me if I'm right. After logging in I see most of the cookies have an expiration date in 1970. Screen Shot 2020-07-09 at 5.48.05 PM.png The effect seems to be that you are logged in but your cookie almost immediately expires. I sniffed the phpBB code...

Version 1.0.16 includes the bug fixes found: The template issue on the settings page that forced the test IP addresses field to the right of the new seconds setting has been fixed. Logic that was incorrectly categorizing access from countries where the country was disallowed but the user was already...

Not sure what Singapore Sling has to do with this extension. A VPN is assigned to a country. So unless you set "Allow registered users to login from restricted countries" to Yes, VPNs can't circumvent the extension's logic. I'm a member of a board that has my country blocked at the time i was not a...

Actually, the more I think about it, all Ajax requests should not be counted in the statistics. phpBB uses Ajax for things like notifications, moderation, installation, recreating search indexes, etc. So that's the approach I will use which will also take care of extensions that use it, like mChat. ...

Technically - nothings wrong with Filter by country, it does what it is supposed to do, so no urgent need to fix this, but it would be nice to have the option the have "clean" stats without "passive" page refreshes by mchat. I think I can work around Ajax requests, which is how mChat does its work....

Nice ext but way too easy to get around with a vpn maybe try blocking the browser language code for a country or part of a country. https://i.ibb.co/6Ft7K4r/sing.png Not sure what Singapore Sling has to do with this extension. A VPN is assigned to a country. So unless you set "Allow registered user...

What are the IP(s) involved? You can test MaxMind's evaluation of an IP here: https://www.maxmind.com/en/geoip-demo/ this doesnt matter. I used on purpose via vpn a swiss and czech ip which are blocked in my configuartion. As a have selected yes for "Allow registered users to login from restricted ...

nope. Just cleared all stats and used a czech and swiss vpn for testing (and accessed the forum properly). Thats a screenshot what a I see in the stats. I think this is not correct, and the czech and swiss visits should have been counted into "Allowed page requests from restricted countries" and no...

additionally with version 15 stats are counted wrong with vpn. I just tested it and my allowed visit with restricted country is counted wrong into Restricted page requests although I can access the forum. This should be fixed. If the country would otherwise be restricted but "Allow registered users...

Installed 1.0.15 Only lay-out looks strange to me? Screenshot_2020-07-06 Filter by country.png Odd my editor didn't pick that up. In /adm/style/acp_filterbycountry_body.html after line 58: <dd><input type="number" id="phpbbservices_filterbycountry_seconds" name="phpbbservices_filterbycountry_second...