Re: Manage “Remember Me” login keys do not work

janus_zonstraal · Post by **janus_zonstraal** » Tue Aug 15, 2017 5:25 am

Browser cache?

canonknipser · Post by **canonknipser** » Tue Aug 15, 2017 8:00 am

Wrong cookies?

salvatti · Post by **salvatti** » Tue Aug 15, 2017 6:33 pm

Wrong cookies?

Browser cache?

My mistake? lol

Well, I thought that phpbb immediately disconnects other places when I delete the key (disconnects when the other place try to update the page - e.g. clicking in something).

Now I think I'm wrong. It will be disconnect after a time adjusted in settings, right?

salvatti · Post by **salvatti** » Tue Aug 15, 2017 8:49 pm

Well, after a few experiments, my conclusion is that key deletion really does not work.

I set session lenght in 1 minute. I log in with the same user in Android and Windows. In Windows, I checked "Remember me", creating a key. In Android, I deleted that key created in Windows. User kept logged in endlessly in Windows.

Post by **Brf** » Tue Aug 15, 2017 8:51 pm

Did you close the Windows browser and re-open it?

salvatti · Post by **salvatti** » Wed Aug 16, 2017 5:31 pm

Everything.

Does it work for you?

Post by **Brf** » Wed Aug 16, 2017 7:28 pm

Yes.
I log in check-marking to remember-me.
I go into profile and delete the remember key.
Go into load settings and set session time to 60 seconds and online time to 1 minute.
Close browser.
Wait.....
Browse to site and see login form.

salvatti · Post by **salvatti** » Wed Aug 16, 2017 9:56 pm

What version of phpBB?

salvatti · Post by **salvatti** » Fri Aug 18, 2017 9:57 pm

The same is happening with my another phpBB forum (3.1.10) with in another host.

salvatti · Post by **salvatti** » Sat Aug 19, 2017 9:33 pm

Using UwAmp (local) or Hostinger and phpBB 3.2.1 or 3.1.10, fresh install. Same results. The function didn't work.

Brf wrote: ↑
Wed Aug 16, 2017 7:28 pm
Yes.
I log in check-marking to remember-me.
I go into profile and delete the remember key.
Go into load settings and set session time to 60 seconds and online time to 1 minute.
Close browser.
Wait.....
Browse to site and see login form.

Can you provide your configurations? Has your forum ever been updated?

Post by **Mick** » Sun Aug 20, 2017 9:41 am

canonknipser wrote: ↑
Tue Aug 15, 2017 8:00 am
Wrong cookies?

Please supply a link to your board so we can check.

salvatti · Post by **salvatti** » Sun Aug 20, 2017 7:56 pm

A link is enough or do you need a user too?

https://www.rbarcelona.com.br

janus_zonstraal · Post by **janus_zonstraal** » Sun Aug 20, 2017 8:48 pm

salvatti wrote: ↑
Sun Aug 20, 2017 7:56 pm
A link is enough or do you need a user too?

https://www.rbarcelona.com.br

(Fresh installation - phpBB 3.2.1 - english)
Your board styles are phpbb_version = 3.1.10 and you are posting in the 3.2 support?

salvatti · Post by **salvatti** » Sun Aug 20, 2017 9:10 pm

This is a universal problem. It's happens with the versions of phpBB: 3.1.10, 3.2.0, 3.2.1. (All tested).

Board fresh install, Windows fesh install. Chrome fresh install. Opera, Firefox etc.

More important is solve the problem that happens in my 3.2.1 board.

In the link you will find an board and a URL that I can expose against attacks. I can't expose my 3.2.1 board.

Post by **stevemaury** » Sun Aug 20, 2017 9:27 pm

What "attacks"? Do you think all phpBB boards whose URL is known (like this one, for example) are "attacked"?

advertisements