PHPBB Question

[JDobbsy1987]

Hi,

I have a forum at work (hosted internally on a linux ubuntu VM machine - 10.25.40.16) and i have an issue with what i believe to be cookie settings.

Basically, if i insert a link from one post to another it logs people out when they click it.
I believe it does this due to the SID being in the URL, when the user enters their credentials then it shows the post that the link was too.

The URL at work is http://techforum01 (This is obviously inaccessible externally)

I have also create an entry in the host file so i can access it at www.techforum01.com:

10.25.40.16       www.techforum01.com

My cookie settings are:


Can anyone advise how to get the cookie settings working correctly so we don't keep getting logged out??

Are there any files i can upload that you can check or anything like that?

Regards,
JDobbsy1987

 

[TCG]

I suspect your issue is that the cookie settings are not matching the url that the site is being accessed with. So hitting the site via www and then without, the server & browser treat it as 2 separate urls and the cookie will not work as the url has "changed".

So the easiest thing to do would be make them match. Set the cookie domain to techforum01.com (no leading "."). Then in your hosts file set the entry to techforum01.com (no leading "www."). Restart your browser and try the url http://techforum01.com just like you've set it in the cookie settings and hosts file. Any links that you post should match this format moving forward, and then you should be fine.

*Note: all users that use said site should also be accessing the site via the same url. Any current links that you have that are not in this format will need to be fixed to avoid this happening. You might need to manually clear your browser cookies, once everything is set, in order to function properly.*

Let me know if this doesn't work and I'll do a quick install here to see if I can dig a little deeper.

 

[JDobbsy1987]

Hi TCG,

Thank you for your reply, unfortunately this hasn't fixed it or i am missing something?

Accessing via http://techforum01.com


I can still see the SID in the URL, is this normal?




Cookie Settings:




Host File:


Regards,
JDobbsy1987

 

[TCG]

In the ACP, make sure that the "Cookie Domain" set in Cookie Settings is the same as "Domain Name" on the Server Settings tab. Perhaps they are different? While you're there enable "Force server URL settings" if it's not already.

I just did a test install here with the exact setup you have, url included. I'm able to post links and click them without breaking login so it's surely something with your setup/config. Possibly you have a remnant cookie still causing this behavior?

- To answer: Seeing the SID is normal behavior for phpbb3, nothing to worry about there.

I'd be happy to take a look remotely if you would like, it might be better to see something like this in action to determine exactly what is happening. Perhaps we can get together for a quick Teamviewer session later tonight or tomorrow?