[SPLIT FROM] Remember Me - settings that allow you to stay logged in?

[PeteBartram]

Can I revive this please?

I too am finding myself logged out if I open our forum (a vanilla install of phpBB 3.3.12 with just the Gallery extenesion) in a new tab / window; Remember me is enabled, and I have extended "Remember Me" login key expiration length to 7 days as an experiment. Are there any other settings I should be looking at, please? I note from viewtopic.php?t=2647852 that the default is for users to stay logged in until they logout, but the Session length in our ACP is set to 3600.
We are in the process of upgrading our very old phpBB forum, where 'Log me in automatically each session' seemed to work fine, and there are going to be howls of protest if we can't duplicate that!

Thanks

[halil16]

Well. Something seems unsafe. This may not be approved by some, but try adjusting the security settings like this:

[PeteBartram]

OK - I've tried those settings, thank you - I'll see how it goes. In the meantime, I made the rookie error of thinking the Reset button at the bottom of the settings would enable me to return the values to their defaults - but apparently not. So could someone kindly post a screenshot of what they should be, in case I need to return them? I think IP validation was on A.B, Validate browser was 'Yes' and X_FORWARDED_FOR was 'No' . . .

Any other suggestions for staying logged in / being automatically logged in when clicking on a link in a notification email etc still welcome!

Thank you

[rxu]

Login issues are usually related to cookie settings, f.e. incorrect domain set.

[PeteBartram]

I've deleted my site cookies and cleared the Forum cache. One point I haven't mentioned that may be relevant is that our forum is restricted to members only - ie you have to register before you can view / post.

However, thinking about your 'incorrect domain' suggestion - the current forum exists at rileyrmclub.org.uk/forum, whereas the test upgrade is in a different domain, https://upgrade-gw.therileyrmcentre.co.uk/forum/, where a copy of the original was made (not ideal, but necessary for a number of reasons).
Looking at the cookie I've now got, it's as the attached cookie.jpg, compared with cookies original.jpg for the existing forum

Cookie.JPG

Cookies original.JPG

[rxu]

Sometimes domain name may require a leading . for browsers to handle it correctly.
Also from your screenshots, the site is served via https but secure cookie status is false. You might need to set Cookie secure to Enabled for it to work correctly.

[PeteBartram]

OK - many thanks - I'll do that

Edit - it already is set to secure, presumably having inherited that from the original, so I'm not sure where that status has come from

[PeteBartram]

What I have just noticed, though, is that the domain has been inherited as well, & is still set to .rileyrmclub.org.uk/
Doh!

Is it best just to leave it blank, in fact, as suggested?

[PeteBartram]

OK - I've left it blank, deleted my cookies, purged the cache, and all seems fine, to the extent that I can copy a post url, close the tab/window, open a new one and paste & go.

My apologies for effectively wasting everyone's time while I found that basic setting, but I do still have those two questions;

is it possible to return a page of settings in the ACP to their defaults, since Reset doesn't seem to do it, and

what should the defaults be on that Security page, from Session IP validation down to Validate upload certificate?

Thanks again for the help & suggestions

[thecoalman]

.rileyrmclub.org.uk/

If that is what you have for cookie domain remove the trailing slash.

what should the defaults be on that Security page, from Session IP validation down to Validate upload certificate?

Set it to .a.b , this is usually not a problem unless there is proxy involved.

[PeteBartram]

Thanks - I left the domain blank, as suggested.

[Mick]

To help speed things up it’s always better to give as much information as possible by please filling out the Support Request Template and posting it back here to enable us to assist you better.