To administer the board you must re-authenticate yourself.

Exclusive · Post by **Exclusive** » Thu Jul 19, 2018 12:03 am

Each time I successfully log in to my board, and I try to access the ACP, it logs me out to re-authenticate over and over. I'm sick and tired of this!

Post by **stevemaury** » Thu Jul 19, 2018 12:39 am

You are unable to access the ACP? Or . . .?

Lumpy Burgertushie · Post by **Lumpy Burgertushie** » Thu Jul 19, 2018 1:47 am

it is not logging you out. that is a normal security feature of phpbb. you have log into the admin panel even if you are already logged into the board.

this has been standard since phpbb 3 started I believe.

robert

</Solidjeuh> · Post by **</Solidjeuh>** » Thu Jul 19, 2018 2:03 am

I found this: viewtopic.php?f=72&t=1729435#p10437255
But I thought there was an extension or something for this ...

Post by **Brf** » Thu Jul 19, 2018 2:11 am

Froddelaar wrote: ↑Thu Jul 19, 2018 2:03 am I thought there was an extension or something for this ...

I do not think so. We frown on code that decreases the security of PhpBB.

Exclusive · Post by **Exclusive** » Thu Jul 19, 2018 3:34 pm

stevemaury wrote: ↑Thu Jul 19, 2018 12:39 am You are unable to access the ACP? Or . . .?

When I successfully log in, trying to access ACP, It will require me to re-authenticate, I will do this over and over before I can access my ACP

Exclusive · Post by **Exclusive** » Thu Jul 19, 2018 3:37 pm

Froddelaar wrote: ↑Thu Jul 19, 2018 2:03 am I found this: viewtopic.php?f=72&t=1729435#p10437255
But I thought there was an extension or something for this ...

I think I will like this. Lemme try and give you feedback!

GanstaZ · Post by **GanstaZ** » Thu Jul 19, 2018 3:42 pm

If you want to remove security layer, then go ahead and apply those changes. When you log in and want to access acp re-authentication is there and should be there. With every logout you need to re-authenticate yourself as admin to enter acp. Don't hit logout and all will be ok.. no need to re-authenticate more than once.

Post by **Mick** » Thu Jul 19, 2018 3:45 pm

Have you tried a different browser, are you using Firefox, do you use ESET AV, have you checked the cookie/security settings in your browser?

We don’t want to know if you circumnavigate the log in.

Exclusive · Post by **Exclusive** » Thu Jul 19, 2018 3:51 pm

Mick wrote: ↑Thu Jul 19, 2018 3:45 pm Have you tried a different browser, are you using Firefox, do you use ESET AV, have you checked the cookie/security settings in your browser?

We don’t want to know if you circumnavigate the log in.

I'm using Firefox, I don't use ESET AV. Lemme try another browser an give you feedback.

I just tried using Chrome, It logged in, when I click on another tab, it logs me out to re-authenticate again & again (twice)

Lumpy Burgertushie · Post by **Lumpy Burgertushie** » Thu Jul 19, 2018 4:29 pm

it does not "log you out" when you are trying to access the admin panel.
it is supposed to ask you to reauthenticate before accessing the admin panel.
if you have to do it more than once then there is something wrong with your cookies etc.

how about a link to the board so we can test things for you.

robrt

Post by **stevemaury** » Thu Jul 19, 2018 5:14 pm

ACP doesn't use cookies.

Exclusive · Post by **Exclusive** » Thu Jul 19, 2018 7:15 pm

Lumpy Burgertushie wrote: ↑Thu Jul 19, 2018 4:29 pm how about a link to the board so we can test things for you.

robrt

Board URL: [check my signature]

Lumpy Burgertushie · Post by **Lumpy Burgertushie** » Thu Jul 19, 2018 9:18 pm

ok, first, put a dot in front of the cookie domain

then, since you are using cloudfare ssl you really need to set cookie secure to yes and add the bit to the htaccess file that redirects all http requests to https.

that could be the problem.

that is providing that you really mean you are being logged out and not that you are just seeing the re authenticate box when you try to access the admin panel.

robert

Exclusive · Post by **Exclusive** » Thu Jul 19, 2018 9:28 pm

Lumpy Burgertushie wrote: ↑Thu Jul 19, 2018 9:18 pm ok, first, put a dot in front of the cookie domain

then, since you are using cloudfare ssl you really need to set cookie secure to yes and add the bit to the htaccess file that redirects all http requests to https.

that could be the problem.

that is providing that you really mean you are being logged out and not that you are just seeing the re authenticate box when you try to access the admin panel.

robert

Thanks for your response. The forum cookies URL is: forum. is there any need of putting a dot before the forum (.forum.)?
and the Cookies name is: phpbb3_j2lwq4 ? is there anything wrong?

On my Cloudflare > Crypto > Always use HTTPS, I have enabled this option. Is there any other need to also add the bit to the htaccess file that redirects all http requests to https again?