I keep getting logged out farkin!

[Inc][nerator]

Hey,

I will just be sitting here on mah computer, reading the forums and writing posts and suddenly I get logged out (I can tell cause my quick reply dialog stops showing up)

Anyone know why this is happening? I can log back in afterwards but it's annoying (and it never used to happen)

[Goo]

never happens for me

[Conscience]

happens to me as well... something to do with cookie timeouts and stuff but I'm not 100% sure...

I bashed goo around but he says he doesn't know either..

[Goo]

I'll look into it farken

[Conscience]

don't you hate being an administrator goo? people actually have the NERVE to ask you to do stuff =D

[Inc][nerator]

I think I know what the problem might be

These forums spam me with loads of extra cookies called stuff like bbthreadview[1544] etc... Currently I have 15 of these...

So what is probably happening is that, due to standardized limits on the number of cookies a client is supposed to be allowed to store (I think about 20 from memory), my browser is being forces to forget the important cookie! (my bb userid, password and sessionhash)

Sounds a bit complicated to fix cause there is no way for a client to force deletion of a cookie (other than making it expire when the browser closes, but that is what is happening anyway).

Perhaps change the domain on the important cookies to seperate it from the annoying stupid ones?

[Conscience]

i havea fix for you!!! stop spamming the board =D lol

actually that sounds like a very valid theory, however, don't you think vb designers would have thought of this? maybe not but still

[Goo]

well their solution to that would have probably been sessions but since these are insecure, we use cookies

[Conscience]

how so? (insecure, any more so than cookies?)

[Goo]

Because it can be passed around the command line (?s=34567898765 etc), and 99% of the forum users wouldn't be aware of this, and they'd say to their mate, check this out and pass on the link, logging their mate in as them

[Conscience]

wrong. the session hash system doesn't allow it. (the vbb ppl are smart )

[Goo]

Nup, it works i did it all the time.
I'd pass on a link and the other person would be logged in as me

[Conscience]

WTG.... only coz you fuck with the code :p

[Goo]

Originally posted by Conscience
WTG.... only coz you fuck with the code :p

I'm talking a base install retard

(this was the ancient version, they might have fixed it in this version)

[Conscience]

( notice the ) teehee

[Inc][nerator]

Theory proved!

I got logged out again so I checked mah cookies... I had 20 from .sgl.org.au, and the userid and password cookies were missing.

So I logged back in and checked them again. Still 20, but this time with the userid and password ones back. By relogging in my browser is forcing the removal of the dirty threadview ones.

Do we really need the threadview ones? That's what is causing the problem here.

[Conscience]

ffs these vbb ppl...

ill go overt there and kick some ass... thanks incio

[Conscience]

Ok. the dev team said it is a known issue and it will be fixed in the next release of vbb (2.2.7) which is due out in a few weeks.

[Lego]

This is shitting me, its happening to me now! Every time I close my browser

[Lego]

omg, I think I found the problem. The other day I switched on "Send you an email when you receive a Private Message?" and also "Pop up a box when you receive a Private Message?" and since then Iv had the problem. I turned them off just then and in the las half an hour I haven't been logged out!