View Single Post
  #2  
Old 02-21-2011, 03:22 PM
zwoti's Avatar
zwoti zwoti is offline
Super Moderator


 
Join Date: Mar 2004
Posts: 9,971
the wonders of google

Quote:
Login issues are always cookie related in some regard, and since you said you were allowing cookies, it didn't make sense that you'd timeout anyway.

As it turns out, the "Remember Me?" option is what makes vBulletin save the login credentials in cookie values. Without that option being checked, a simple session timeout results in a member being logged out.

A reply:

All cookies stored temporarily should be able to maintain your account logged on every board out there.

Answer:

Yes, but only if you are storing all the necessary cookie values. Checking the "Remember Me?" box causes vBulletin to store two extra cookie values not otherwise saved: bbuserid & bbpassword. Without those, anything that invalidates your session will cause you to be logged out.

A reply:

Perhaps vbulettin and other boards are rejecting my browser because my network is changing IPs constantly while you're online (this maybe the reason behind this).

Answer:

IP address is part of the sessionhash, so a rapidly changing IP address will invalidate your session and leave you logged out "if" bbuserid & bbpassword are not available to establish a new authenticated session when the address change occurs.

A reply:

If I am not checking the worthless box "Remember my login/password", I can't stay logged more than 2 minutes here.

Answer:

If you choose to uncheck the "Remember Me?" box, (which is checked by default), and if your proxy service is rapidly changing your IP address, then you will suffer those rapid logouts. There's nothing we can do about it. It's the session mgmt design in vBulletin.

A reply:

Every boards allow you to be logged at least for 60 minutes, you may set the time (or not).

Answer:

Actually, that's not true. The default session timeout for vBulletin is 15 minutes. Some forums change it to a larger value, but most don't. (The longer the session timeout, the larger the overhead for maintaining member sessions.)

In any case, even if we increased the timeout, it wouldn't help you. If you don't allow Remember Me? to be set, the first change of IP address will invalidate your session regardless of the timeout, as is seen by the fact that session timeout is 15 minutes yet you are getting logged out every two minutes.
Reply With Quote