Users are logged out

[xen]

Support Request Template
What version of phpBB are you using? phpBB 3.3.2
What is your board's URL? https://www.allscaletrek.com/
Who do you host your board with? hostwithlove.com
How did you install your board? I used the download package from phpBB.com
What is the most recent action performed on your board? Update from a previous version of phpBB3
Is registration required to reproduce this issue? Yes
Do you have any MODs installed? No
Do you have any extensions installed? No
What version of phpBB3 did you update from? phpBB 3.3.1
What styles do you currently have installed? prosilver Special Edition
What language(s) is your board currently using? english
Which database type/version are you using? MariaDB
What is your level of experience? New to PHP and phpBB
What username can be used to view this issue? PHPBB
What password can be used to view this issue? PasswordForPHPBB
What actions did you take (updating your board; installing a MOD, style or extension; etc.) prior to this problem becoming noticeable? none
Please describe your problem. various users are logged out despite ticking the stay logged in option. there is no pattern. some have it all the time. i have it once every 3-4 times.
Generated by SRT Generator

[ssl]

You should avoid providing a test account with ACP access

Capture d’écran 2024-07-25 à 06.25.43.png

[thecoalman]

I've removed the account credentials, as noted by SSL and the directions in the support request template they should be credentials for test account with regular user permissions. On rare occasions phpBB staff may request admin credentials but that is through private communications.

I'm going to strongly suggest you change the password for that account and for future reference always do that when giving out credentials with admin permissions. Never give credentials for a user set as founder. That one wasn't, I checked.

[Madalin10]

Check your cookie settings.
https://www.phpbb.com/support/docs/en/3 ... -settings/

You can also post a screenshot with the cookie settings here.

[janus_zonstraal]

Check your cookie settings.
https://www.phpbb.com/support/docs/en/3 ... -settings/

You can also post a screenshot with the cookie settings here.

There is nothing wrong with the cookies.

[ssl]

No, everything seems OK regarding cookies on your board, you should start by deactivating all extensions to see if the problem persists.

[ukautoforums]

Stay logged in option does not do what you or every other normal forum user thinks unfortunately. I've been round this many, many times.

When a user logs in they start a session. A setting in PHPBB under Load Settings is Session Length. By default its something like 60 minutes. After a period of inactivity, the session is ended, user needs to log back in again when they return.
Changing this setting will keep them logged in, but puts a huge strain on your session table and is not recommended.

[thecoalman]

After a period of inactivity, the session is ended, user needs to log back in again when they return.

That is not the way that works. You would only see that behavior if cookie is not being set correctly. The SID in the URL will persist for every link, that will expire with the session and you will need to login.

[ukautoforums]

Are you sure as testing it that is what I see.

An example here - I've just come to reply and I've had to log back in again.

[Brf]

I have not had to login for months. Your problem is you keep changing IP addresses. When you do that, you have to login again.

[ukautoforums]

Ok, so we’re saying that even assuming cookie is set correctly, if you’re on a dynamic ip you’ll still get logged out?

I know session time has something to do with it as well as I’ve tested that.

[Brf]

Under Security Settings, there is a setting called "Session IP validation". If you turn that off, it will ignore IP address changes.

[xen]

hi guys,

thanks for getting back to me. the test account should only have normal permissions now (thank you for spotting my error and removing it) so please check. i had added the test account and pw back to the form.

i use the same ip and it logs me out every now and then with no pattern. other users report being logged out each time. this seems to be regardless of browser or device used.

i have checked my cookie settings and they appear to be correct and asked the host if they made any changes to the sever but they said they have not.

i had this problem before and found a fix but that was years ago on another version so i'm stumped as to how to fix this.

[xen]

can anyone help out with this?

[janus_zonstraal]

Maybe it has to do with the many guests on your board.
Check Who is online, if there are a lot of bots block them in your .htaccess or with Cloudflare.