| Author |
 Topic Search  Topic Options
|
Kraven 
Newbie
Joined: 20 May 2004
Status: Offline
Points: 2
|
 Post Options
 Thanks(0)
 Quote  Reply
 Topic: Logging in from multiple locations
Posted: 21 May 2004 at 8:28am |
|
Hello,
I have recently upgraded to version 7.8 of the forums and my users have noticed something different happening. Some of them connecto the forums from work and from home and prior to version 7.8, the forums would keep them logged in at both locations (same account). Now, however, you can't stay logged in from two different computers at once. It isn't related to operating systems or browsers since I've polled the users and they use everything from Mozilla to IE and Win 98 to XP and they all have the same problem.
To reproduce it, I've been testing with my computer (winXP, IE 6 and Mozilla Firefox) and my laptop (win98se, IE 5). When I log in on my computer, everything works fine. When I log in on the laptop, everything works fine on the laptop. After I've logged in on the laptop, however, the computer is no longer logged in and I get the "only users with specific permissions can access this forum" message.
Is this a new security feature or is there something else going on here?
Thanks for the help.
|
 |
WebWiz-Bruce
Admin Group
Web Wiz Developer
Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
|
Post Options
Thanks(0)
Quote Reply
Posted: 21 May 2004 at 10:19am |
|
This was a security feature sometime ago that was removed, but has been
put back in again with version 7.8 after a few security sites reported
this as a security flaw in the software.
Now the auto login feature only works on the computer you are on, if you use another machine you will need to login again.
The security code used to track users and also used for keeping the
user logged in is now changed each time you login. It is also changed
in other parts of the forum code more often. This will help prevent
hackers getting hold of valid security codes, but does mean a user will
need to re login again when moving to different machines.
|
|
|
|
Kraven
Newbie
Joined: 20 May 2004
Status: Offline
Points: 2
|
Post Options
Thanks(0)
Quote Reply
Posted: 21 May 2004 at 10:43am |
Thank you for the prompt reply. I'll just tell my users to deal with it 
|
|
Patrick Melton
Newbie
Joined: 07 October 2003
Location: United States
Status: Offline
Points: 12
|
Post Options
Thanks(0)
Quote Reply
Posted: 30 September 2004 at 11:01am |
|
Is there any way to disable this "feature"?
|
|
dj air
Senior Member
Joined: 05 April 2002
Location: United Kingdom
Status: Offline
Points: 3627
|
Post Options
Thanks(0)
Quote Reply
Posted: 30 September 2004 at 11:58am |
|
to disable it
We Advised not to though
delete the section in the login page that updates the field User_code.
|
|
ndamico
Groupie
Joined: 03 September 2003
Location: United States
Status: Offline
Points: 46
|
Post Options
Thanks(0)
Quote Reply
Posted: 30 September 2004 at 2:38pm |
dj air,
is this what one would delete?
'For extra security create a new user code for the user
strUserCode = userCode(strUsername)
'Save the new usercode back to the database
rsCommon.Fields("User_code") = strUserCode
rsCommon.Update
thank you!
|
|
ndamico
Groupie
Joined: 03 September 2003
Location: United States
Status: Offline
Points: 46
|
Post Options
Thanks(0)
Quote Reply
Posted: 30 September 2004 at 2:48pm |
well i tried the above and it didn't work.. perhaps you can tell me what i need to remove.. when i removed the above code it just prevents anyone from logging in 
|
|
Patrick Melton
Newbie
Joined: 07 October 2003
Location: United States
Status: Offline
Points: 12
|
Post Options
Thanks(0)
Quote Reply
Posted: 30 September 2004 at 2:50pm |
You can just comment it out so it looks like this:
'For extra security create a new user code for the user
strUserCode = userCode(strUsername)
'Save the new usercode back to the database
'rsCommon.Fields("User_code") = strUserCode
'rsCommon.Update
|
|
