View previous topic - View next topic |
Author |
Message |
Bjorn Demon Hunter

Joined: 29 May 2002 Posts: 1425 Location: Germany
|
Posted: Mon Dec 23, 2002 11:18 pm Post subject: About login and cookie problems of main RPGDX site |
[quote] |
|
I'm currently doing work on integrating PHP+MySQL based session management into RPGDX. I'm using Sessionara, a freely available implementation under a slightly modified GPL license*. This should work around this servers broken session settings and no cookies will be neccesary because the session id will be send between pages using the URL.
This will not instantly effect these forums, but it will effect the RPGDX site and the forums that will be integrated into it in the future. The first noticable difference for most will probably be to be able to login without using the autologin feature.
Thanks to all who are adressing these problems.
*) In particular the differences are that the author demands to be told about any changes made to it and that it cannot be used for commercial purposes.
|
|
Back to top |
|
 |
Bjorn Demon Hunter

Joined: 29 May 2002 Posts: 1425 Location: Germany
|
Posted: Tue Dec 24, 2002 6:32 pm Post subject: And the forum cookie problems... |
[quote] |
|
And about the forum login problems, I took a dive into the Administration Panel and entered a cookie path ("/indierpgforum", where is first said "/"). It would be cool if that would fix the conflicts people are having.
|
|
Back to top |
|
 |
grenideer Wandering Minstrel

Joined: 28 May 2002 Posts: 149
|
Posted: Tue Dec 24, 2002 9:32 pm Post subject: yup |
[quote] |
|
thanks bjorn, it did fix the autologin problem. I was pretty sure it just had to be a simple setting myself, since it did work before the move. _________________ Diver Down
|
|
Back to top |
|
 |
Bjorn Demon Hunter

Joined: 29 May 2002 Posts: 1425 Location: Germany
|
Posted: Tue Dec 24, 2002 10:55 pm Post subject: |
[quote] |
|
Cool, it's great how that was so simple to fix. It's really bad though that it took to long before I went to the administration panel.
I've updated RPGDX with the integrated Sessionara for session management. It still uses a cookie for storing the session id because of security issues. When appended to the URL it could cause people you send the link to resume your session. I could build in an IP check but that would cause logout for people that have a dynamic IP that happen to reconnect while posting a message.
But anyway, login should work now also for people not wanting to use the autologin feature. And another plus is that the browser will now cache the pages while it would first fail to do that somehow.
|
|
Back to top |
|
 |