Forum Login NOT using Serial Number

[Elias Montoya]

All i have to click to get in the forums is:
http://www.planetsquires.com/protect/forum/

I dont know why you guys cant.

I really really like the way paul implemented the forums, I love not seeing in google what i post in this forums.

[Peter House]

I have tried logging out, closing my browser and rebooting.  The link in the Topic reply still gets me directly to the reply as if I had logged in.  It must have something to do with cookies since I just tried it on another computer and it does not work.

There are 5 planetsquires cookies present and none appear to have the serial number overtly.  I am using FireFox.

[Elias Montoya]

I am using Ie8.

[Roger Garstang]

I imagine if you select to remember the Serial Number that the cookie for it isn't cleared. There are 5 cookies- A Session ID with the default PHPSESSID name, a SMF cookie with some type of encoded data (When URLDecoded it looks like the content of the files that session variables are stored in...seems redundant to store it on the server and a copy in a cookie), amember_nr which is some type of MD5 hash...possibly a type of session ID, amember_ru that is your user name, and amember_rp that is a MD5 Hash of your Serial number with dashes.  Seems a lot of session IDs are created, but username and password/serial are still stored as a cookie and not in the session variables.

[Peter House]

If I link directly to the front end of the forum, I MUST type in my username and password (serial number).

If I link to a sub page, I get in for free!

What's wrong with this picture?  (this is an SMF issue and has nothing to do with Paul dude at planetsquires)

[Roger Garstang]

As long as I don't close my browser I can go anywhere. My cookies are all set to expire when FireFox closes. When I open a new browser there are no Planetsquires cookies. One weird thing though when Logout is clicked all 5 cookies remain and a 6th PHPSESSID is created. The original is a Domain .planetsquires.com cookie and the new is a Host www.plantesquires.com cookie. Both have different Session ID values, so there is some obvious cleanup missing on logout with Session Variables and Cookies since they all remain and a 2nd session is opened. I'm guessing Paul's Host Temp folder is full of session files if there is no Cleanup Script running.

[Roger Garstang]

When I logout a user in my company's site I use this code at the beginning of my page:

Code Select Expand


error_reporting(0);
ini_set('display_errors',0);
session_name("GiveItaNameSoNotCalledPHPSESSID");
if (isset($_POST['Action']) && ($_POST['Action'] == 'Logoff'))
{ // Logoff
   session_start(); // Open session so you can close it
   $_SESSION = array(); // Clear Session Variables. Also Clears the Session File so 0byte files can be deleted from TEMP folder
   if (isset($_COOKIE[session_name()])) setcookie(session_name(), '', time()-42000, '/'); // Expire Session ID Cookie
   session_destroy(); // End Session
}
session_start(); // Start Session, either new or existing if not logged out


[Klaas Holland]

I use Safari and I have no problem at all.
My name and Serial number are filled in already so I just need to click sign in.