Does anyone else keep getting logged out?

Forums › Geekzone › Does anyone else keep getting logged out?

1 | 2

mjb

996 posts

Ultimate Geek
+1 received by user: 67

Trusted

#706561 25-Oct-2012 22:18

freitasm: It must be something else - perhaps you have an AV that is cleaning cookies, or your browser is set to store cookies for the session only, or a proxy causing this.

I know for certain is not our code because for the last four days I have an email trap that notifies me of sessions being logged out due to IP change - and YOURS IS NOT SHOWING UP IN THE LIST.

No need to yell.

Linux notebook, no changes since the log outs have started happening - and it's literally being put to sleep with the browser left open, then when woken GZ live won't update my "participating" threads, and if I reload the page, the header reverts to a logged out view. Of course, it's being woken in a new network environment, so that'll be where the red herring is coming from.

Hey, I'm not saying it's definitely the site code, it was just a thought towards a possible cause.

contentsofsignaturemaysettleduringshipping

freitasm

BDFL - Memuneh
80652 posts

Uber Geek
+1 received by user: 41041

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#706564 25-Oct-2012 22:21

Does it happpen on Geekzone Live but not on main site? It could be the code is not in sync there. Will check tomorrrow.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

mjb

996 posts

Ultimate Geek
+1 received by user: 67

Trusted

#706567 25-Oct-2012 22:26

freitasm: Does it happpen on Geekzone Live but not on main site? It could be the code is not in sync there. Will check tomorrrow.

I haven't noticed it, but that's not to say it doesn't - my entry vector is by a tab left open on GZ live.

edit: just noticed this post:

freitasm: By the way when you get logged out do you go back to default or to changeIP page?

I wasn't aware there's a 'changeIP' page, and I don't think I've ever seen it, so yes, I suspect you can rule out the intentional IP based session logout. I do wonder what difference in cookies I have between a user not experiencing the issue, and myself.

Ignoring the google analytics and other third party cookies, I have PIONTemp, SessionGUID and fullversion. (as for third party cookies - there's also cloudflare's __cfduid, which I only mention due to your recent changes pushing more content via cloudflare. probably nothing though, I guess)

contentsofsignaturemaysettleduringshipping

cyril7

9075 posts

Uber Geek
+1 received by user: 2499

ID Verified

Trusted

Subscriber

#706630 26-Oct-2012 07:36

Hi, no just back to default not the changedIP address page, which to be honest I have never seen.

Cheers
Cyril

freitasm

BDFL - Memuneh
80652 posts

Uber Geek
+1 received by user: 41041

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#706641 26-Oct-2012 07:54

Im looking into session records for MJB.

Cyril7, your last session was marked to not persist login - it seems you haven't check the box "Keep me logged in", at least for this one.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

mjb

996 posts

Ultimate Geek
+1 received by user: 67

Trusted

#706664 26-Oct-2012 08:45

freitasm: Im looking into session records for MJB.

Cyril7, your last session was marked to not persist login - it seems you haven't check the box "Keep me logged in", at least for this one.

Hah... I suspect that's what's affecting me too. I never check it, because it never seemed to make a difference in the past (I just stayed logged in no matter what), so I'll try that too. Has the code that deals with that been changed recently? (not accusing, just curious).

contentsofsignaturemaysettleduringshipping

Lego

Shop now for Lego sets and other gifts (affiliate link).

freitasm

BDFL - Memuneh
80652 posts

Uber Geek
+1 received by user: 41041

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#706667 26-Oct-2012 08:49

If you don't check the box your session TTL is 20 minutes. As long as you keep refreshing pages, moving around and don't go past 20 minutes the session is alive - this includes the automatic refreshes for the Live feeds in the front page and live.geekzone.co.nz.

This part of the session management hasn't changed in two years since we moved to a multi-threaded, database-based session storage...

Right now your session is not set to keep you logged in...

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

mjb

996 posts

Ultimate Geek
+1 received by user: 67

Trusted

#706685 26-Oct-2012 09:05

freitasm: If you don't check the box your session TTL is 20 minutes. As long as you keep refreshing pages, moving around and don't go past 20 minutes the session is alive - this includes the automatic refreshes for the Live feeds in the front page and live.geekzone.co.nz.

This part of the session management hasn't changed in two years since we moved to a multi-threaded, database-based session storage...

Right now your session is not set to keep you logged in...

That's it then - thanks for checking.

I've worked out that it must have started after the forced logout of all sessions, because I would have logged back in on the GZ Live page and not checked the box. After testing I've worked out why I never checked the box on the site header - after clicking the login button on the header on the main site, it doesn't actually log me in, it takes me to the login page which is where I check the 'auto login' box.

Now, the reason that I've been getting logged out, is that the login from the GZ live header (where I wouldn't have checked the box by habit) actually works, unlike the main site!

contentsofsignaturemaysettleduringshipping

freitasm

BDFL - Memuneh
80652 posts

Uber Geek
+1 received by user: 41041

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#706687 26-Oct-2012 09:07

I use the login in the header of the main site and it works just fine. And I have Secure IP Login enabled - every couple of hours my smartphone is logged out due to changes in IP, but rather be safe than hijacked.

Referral links: Quic Broadband (free setup code: R587125ERQ6VE) | Samsung | AliExpress | Wise | Sharesies

Support Geekzone by subscribing (browse ads-free), or making a one-off or recurring donation through PressPatron.

mjb

996 posts

Ultimate Geek
+1 received by user: 67

Trusted

#706691 26-Oct-2012 09:10

freitasm: I use the login in the header of the main site and it works just fine. And I have Secure IP Login enabled - every couple of hours my smartphone is logged out due to changes in IP, but rather be safe than hijacked.

Curious. I know that it just doesn't work for me - and it never has. *shrug*, I know how to work around it, and it explains my constant logouts ;)

edit: aha! found the problem. mea culpa, it is indeed my fault. turns out Chrome had saved an incorrect password for the login in the header, and the right password on the login page... and I hadn't noticed that they're different saved credential sets. tidied that up and it's working.

must be different form field names or something.

edit2: nope, not that - probably the different login contexts perhaps (non-ssl for the main site, and ssl for the login page). Anyway, problem solved, thanks. (and sorry for the thread hijack)

contentsofsignaturemaysettleduringshipping

1 | 2