• ramses
  • DAW Mastermind
  • Offline
  • From: UTC+1
  • Registered: 2012-10-14
  • Posts: 12,040

Topic: remember me doesnt seem to work anymore

The login option
[x]  remember me
doesn't seem to work anymore since yesterday.

Issue occurres on two different systems (Android Opera, Win7 Firefox).

Whenever I enter the URL https://forum.rme-audio.de
I need to click to "login" now, only then I am automatically being logged in.
Before the login was being performed automatically as it should be.

I tried whether complete logout and fresh login with setting "[x] remember me" changes the situation, but no change.
This morning I tried with Smartphone and Opera, same issue. Yesterday until approx 2pm it still worked.

Win7, Firefox 69.0.1

BR Ramses - UFX III, 12Mic, XTC, ADI-2 Pro FS R BE, RayDAT, X10SRi-F, E5-1680v4, Win10Pro22H2, Cub13
  • vinark
  • DAW Mastermind
  • Offline
  • Registered: 2009-06-05
  • Posts: 2,646

Re: remember me doesnt seem to work anymore

Works here. Win7 firefox

Vincent, Amsterdam
https://soundcloud.com/thesecretworld
Babyface pro fs, HDSP9652+ADI-8AE, HDSP9632
  • From: UK
  • Registered: 2018-08-18
  • Posts: 41

Re: remember me doesnt seem to work anymore

I notice it happening when you enter the basic furm url (https://forum.rme-audio.de)

Any link form the site after that, it picks up that you have a login cookie present - not just the 'login' link

4 Reply by ramses (edited by ramses 2019-10-02 11:09:10)

  • ramses
  • DAW Mastermind
  • Offline
  • From: UTC+1
  • Registered: 2012-10-14
  • Posts: 12,040

Re: remember me doesnt seem to work anymore

Wondering why it worked before.
I restored Firefox Bookmarks from 1 month ago.
I used this URL to access the Forum: "https://www.forum.rme-audio.de/"
Its also the Base URL with nothing else behind ....

The URL didn't change, it's now the same.
https://www.forum.rme-audio.de/

The only thing is, that the behaviour of the forum changed.

BR Ramses - UFX III, 12Mic, XTC, ADI-2 Pro FS R BE, RayDAT, X10SRi-F, E5-1680v4, Win10Pro22H2, Cub13
  • vinark
  • DAW Mastermind
  • Offline
  • Registered: 2009-06-05
  • Posts: 2,646

Re: remember me doesnt seem to work anymore

https://forum.rme-audio.de/

Vincent, Amsterdam
https://soundcloud.com/thesecretworld
Babyface pro fs, HDSP9652+ADI-8AE, HDSP9632
  • ramses
  • DAW Mastermind
  • Offline
  • From: UTC+1
  • Registered: 2012-10-14
  • Posts: 12,040

Re: remember me doesnt seem to work anymore

Thanks Vinark, with that URL it works: https://forum.rme-audio.de/

This URL should be used then on the Webserver as well, but there it is https://www.forum.rme-audio.de/
which does not log you in automatically if you logged in already with the option "remember me" set.

BR Ramses - UFX III, 12Mic, XTC, ADI-2 Pro FS R BE, RayDAT, X10SRi-F, E5-1680v4, Win10Pro22H2, Cub13
  • vinark
  • DAW Mastermind
  • Offline
  • Registered: 2009-06-05
  • Posts: 2,646

Re: remember me doesnt seem to work anymore

https://rme-audio.de/home.html
but new forum links to the old www website.
New website links to the olfd forum and so does the old website.

Vincent, Amsterdam
https://soundcloud.com/thesecretworld
Babyface pro fs, HDSP9652+ADI-8AE, HDSP9632

8 Reply by snoskit (edited by snoskit 2019-10-02 12:22:10)

  • From: UK
  • Registered: 2018-08-18
  • Posts: 41

Re: remember me doesnt seem to work anymore

for a web application the presence of the "www." in a url shouldn't make any difference; but it is here

'https://www.forum.rme-audio.de/index.php'   doesn't pickup the cookies
'https://forum.rme-audio.de/index.php'   does pickup the cookies

Some odd DNS issue maybe




Same if you use a different entry point to the site:

eg

'https://www.forum.rme-audio.de/search.php?action=show_recent'

vs

'https://forum.rme-audio.de/search.php?action=show_recent'
  • From: UK
  • Registered: 2018-08-18
  • Posts: 41

Re: remember me doesnt seem to work anymore

Whilst waiting for a delivery I had a little look at punBB code

punBB writes the full url into its cookies;

eg

www.forum.rme-audio.de    FALSE    /    FALSE    0    PHPSESSID    c4c86141a1b18a30a777e8a3d0b357e5
forum.rme-audio.de    FALSE    /    FALSE    0    PHPSESSID    ac970d33e22d35bdd4090056ec227eed

No attempt is made to strip out the 'www.'

include/common.php:

// Strip slashes from GET/POST/COOKIE (if magic_quotes_gpc is enabled)
if (get_magic_quotes_gpc())
{
    function stripslashes_array($array)
    {
        return is_array($array) ? array_map('stripslashes_array', $array) : stripslashes($array);
    }

    $_GET = stripslashes_array($_GET);
    $_POST = stripslashes_array($_POST);
    $_COOKIE = stripslashes_array($_COOKIE);
}

// Strip out "bad" UTF-8 characters
forum_remove_bad_characters();