Renegade Public Forums
C&C: Renegade --> Dying since 2003™, resurrected in 2024!
Home » General Discussions » General Discussion » wtf is this?
wtf is this? [message #103749] Sat, 24 July 2004 04:12 Go to previous messageGo to previous message
npsmith82 is currently offline  npsmith82
Messages: 525
Registered: February 2003
Location: England, UK
Karma:
Colonel
What you are seeing is a bug that is within PHPBB version 2.0.4 - it has since been corrected with PHPBB version 2.0.6. It can be cured by upgrading to the latest version, it's that simple.

It's related to your ISP (more commonly AOL) bouncing you around different servers whilst on the webpage. Only problem here is, that Crimson has heavily modified the design of these forums to look like the previous WS ones.

If it were easy for Crimson to update to the latest PHPBB version 2.0.10, i'm sure she would. But she would have to spend days modifying the php code again, to keep the WS style forums.

Quote:

My AOL based users keep getting logged out!
phpBB2 uses sessions to keep track of users as they browse the board. These sessions use a combination of a unique session id and the users IP to identify each user. We make use of the IP as an extra safe-guard to help prevent sessions being hijacked (by discovering the unique session id).

Unfortunately this only works when the users IP is constant as they browse the board. For most users this will be the case. However certain providers route their users via a cluster of proxys. In some cases, particularly AOL this results in different IPs being forwarded as the user moves between pages. We take account of this by not checking the entire IP but only the first "three quads". Again in most cases this will be fine. However again AOL uses IPs which can vary so much that checking only the first two quads results in a fairly static IP being available for session validation.

If you are experiencing problems related to this you can make a small change to the code. Please note that reducing the IP validation length does potentially increase the risk of sessions being hijacked (this is something for you to consider, phpBB Group takes no responsibility should anything happen!). The change requires you to open the file sessions.php in the includes/ directory of the distribution. Find line 250, it contains the following

$ip_check_s = substr($userdata['session_ip'], 0, 6);
change this to:
$ip_check_s = substr($userdata['session_ip'], 0, 4);
You need to make exactly the same change to the number 6 in the next line. Save the file (and upload it if required). This should reduce or eliminate the problem noted.

Also, read this page, it'll tell you more about the problem.
http://www.phpbb.com/kb/article.php?article_id=54

Quote:

In modcp.php, change

'PAGINATION' => generate_pagination("modcp.$phpEx?" . POST_FORUM_URL . "=$forum_id", $forum_topics, $board_config['topics_per_page'], $start),

into
'PAGINATION' => generate_pagination("modcp.$phpEx?" . POST_FORUM_URL . "=$forum_id&sid=" . $userdata['session_id'], $forum_topics, $board_config['topics_per_page'], $start),

Crimson, you may wanna try changing that code, apparently it cures the problem for some people. Confused


WOL: npsmith82

For RenAutoComplete, RenSkirmish, RenBuddyList and RenWOLstatus please visit (IE) TheCodeSmith.com
 
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Previous Topic: Leveledit help
Next Topic: Renegade Alert Socket Wrench
Goto Forum:
  


Current Time: Tue Feb 18 21:35:46 MST 2025

Total time taken to generate the page: 0.00780 seconds