[TO ADMINS]Forum logout session time

[toneddu2000]

Hi folks, I'm noticing that session time in this forum it's practically inexistent (probably 30 minutes or less). Is it possible to lenghten it a little? No, not a little, sorry, I mean a lot! At least one day, for crying out loud!

*LITTLEOFFTOPICNOTSOOFFTOPIC* There's still some active adiministrator that manages this site? Because, since we migrated from inside3d we lost tons of users and forum activity is getting lower and lower..plus home page is never updated, so CSQC sticky section (and during 2016/2017 there have been TONS of new things to publish in the CSQC universe).. where are the administrators?

[mh]

I pretty much stopped using the site because of it's inability to keep me logged in. Yes, it would be great if this was fixed; it would have been even greater if it hadn't happened in the first place.

[mankrip]

[frag.machine]

30-minute sessions seems a default timeout value, and actually is a good compromise to websites under normal workload; however in our case where the number of active users is really low I think extending it to say 24 hours wouldn't make any difference in resource usage. OTOH it can make the life of someone trying to hijack or impersonate a legitimate user easier - specially because - so there is a security issue bumping it to much higher values.

EDIT: small typo

[Baker]

[Dr. Shadowborg]

I took a look in the ACP, but it looks like persistent logins IS turned on, with "persistent login key expiration length (in days)" being set to 0. (which *should* always cause autologin) Which probably means that PHPBB is broken or something.

I have no idea what else can be done as I don't want to mess around too much and accidentally break things as I don't know enough about how things are put together. scar3crow or Tomaz were responsible for setting up the new insideqc forum softwares IIRC. (Not sure, I didn't have anything to do with the restoration after inside3d went down before.)

[revelator]

Internal Server Error

The server encountered an internal error or misconfiguration and was unable to complete your request.

Please contact the server administrator, webmaster@forums.insideqc.com and inform them of the time the error occurred, and anything you might have done that may have caused the error.

More information about this error may be available in the server error log.

Additionally, a 500 Internal Server Error error was encountered while trying to use an ErrorDocument to handle the request.

uh oh

[scar3crow]

I was not involved in setting up the new forums in any substantial way.

I set the login length to 90 days, since obviously it wasn't parsing the 0 days as Never, we'll see how it goes from here.

I am around, just not typically on forums, I am very available on Twitter and Discord, as well as running the Quake Community group on Facebook, which are more accessible from the perspective of having 2 minutes here and there.

[Spirit]

Did not change a thing for me. I still have to log in again all the time.

[toneddu2000]

Saaaaame for me

[revelator]

Did you restart the server after changing those values ?, im not sure php will react to changes unless it is.

Many many years since i last made a site myself so im not even sure i could do it today, but if you have a copy of the site software let me have a look at it, i got some old work related friends i can pull on who do this for a living, maybe they can get this fixed.

[revelator]

find the phpbb_sessions_keys table and delete all entries, then reload the server. Warning all logged in persons will be booted from the site so announce it first.
Also check if the session cookie points to the right site, if it does not then it will newer work untill fixed.

If the site uses phphbb 3.02 upgrade it after the above, the 3.02 version is bugged as hell.

[toneddu2000]

[revelator]

Hopefully after the bugs have been taken care of ...