|
|
|
Heroic Knight
 
Group: Basic Members
Last Login: Today @ 10:49 AM
Posts: 155,
Visits: 1,631
|
|
| I'm finding that about half the time I check the rule7 boards I have to log in, even thought I always click the 'remember me' button.. Also, I'm finding that occasionally I'll click on a page, get an error, and finfd I've been logged out in the process.. any ideas what I can do to fix it?
|
|
|
|
|
Knight
Group: Basic Members
Last Login: Saturday, June 16, 2007 1:16 AM
Posts: 61,
Visits: 287
|
|
I'm getting this kind of behaviour too.
I'm sorry Allen, what? Could you dumb that down please?LT - Runt S McEwan PD - Steven Mahr
|
|
|
|
|
Nothing to see here.
Group: Administrators
Last Login: Yesterday @ 9:05 PM
Posts: 451,
Visits: 1,942
|
|
Ok Guys, i'm actually well aware of this issue, which isnt an issue at all, it's something the team found in testing before we accepted live signups. The problems are threefold, i'll outline them so you understand better, but will not be doing much to change anything.
1) Different browsers react differently to that "Keep me logged in" checkbox, because of how they store cookies, this can be because of browser settings, or spyware, or any number of reasons, in short, these forums are very secure, they monitor even slight changes in cookies or sessions, and any change can cause a forced relogin, this is to prevent people hijacking your accounts, so i'm unlikely to remove it.
2) I actually myself remain logged in without typing in my details a fair amount, I tested this extensively during our testing phase as i say one or two of the other guys found this. I found that closing the browser windows when your done reading for now, is the best way to do this. The reason? Well that's all explained in 3)
3) The Viewstate, anyone who knows about ASP.net knows about the ViewState, its a hidden lump of encrypted garbled rubbish that ASP puts on your pages, at least thats what it looks like, what it really contains is all your user data for your current forum session, bits and pieces about you, the details that keep you logged in and authenticated, the meaning of life, and a rather good recipe for peanutbutter cookies. However, thanks to nifty encryption, only I can get at this info, through the code, or the database. However, the app being the marvel of security that it is, if it detects any change in the viewstate data from the last lot it sent to you, it throws the error you mention, and logs you out.
If you leave a window open long enough, your live session expires, and so does your viewstate, so the application thinks you've been idle and closed the browser, and is ready to send a fresh "First" viewstate, when you click something or send something to the forum, it gets confused, because you've been gone ages, and now you just want to waltz back in? You treat this place like a hotel! So just incase your not the you that your viewstate claims you are, it asks you to log in again. This can again happen due to browser settings, plugins, spyware, antivirus interfereing with your web stream. Lots of things. Mine doesnt, and none of the work PC's here at the office do, nor several workstations in the states. I will however keep an eye on the errorcount, if it gets larger than average, it's because there's a problem.
FINALLY...
This is all really exaggerated right now, because we have a team of engineers pouring over our server right now, making it run faster, more efficiently, and fixing a whole load of bugs that really wind me up. I also think they're trying to steal my peanutbutter cookie recipe... The fools! They'll never get it Muahahaha!.... ahem. So they'll be restarting the system frequently, you can expect better service from the weekend forward.
However, hopefully this explains to you the reasons why this occurs, things you can look into to attempt to improve this, and why right now, it probably wont matter what you do, as the servers being restarted lots.
Rule7: I just work here.
EOS: I just work there too.
|
|
|
|
|
Heroic Knight
Group: Basic Members
Last Login: Thursday, August 07, 2008 5:26 PM
Posts: 135,
Visits: 279
|
|
| Using IE 6 sp2 here and getting logged out between sessions. This doesn't happen on other forums that I'm subscribed to so I'm guessing that I don't have anything that's secretly eating all my cookies. Sure it's not a huge deal ... but it's annoying when the advertised option doesn't work. And I'm not convinced that the other forums (fora?) that I use are especially more vulnerable than Rule 7 so I would hazard a guess that there's some minor broken code floating around in whatever package you're using.
"When I want your opinion, I'll read it from your steaming entrails"
|
|
|
|
|
Heroic Knight
Group: Basic Members
Last Login: Yesterday @ 5:02 PM
Posts: 151,
Visits: 1,160
|
|
Could you extend the timeout please?
Over the last couple of days, I've found the forum quite good at remembering who I am, (where previously it wasnt't) - until, of course, I sat down to spend half an hour writing a response to a thread, only to be hit with a timeout error and lose all my carefully crafted proof of why I am right and everyone else is wrong.
In fact, it might be nice, if you've got to boot somebody out when a session expires, to record any form information somewhere anyway, so they can copy it, log back in, and repost without having to retype the whole thing.
(chris)
|
|
|
|
|
Heroic Knight
Group: Basic Members
Last Login: Today @ 10:49 AM
Posts: 155,
Visits: 1,631
|
|
| this has happened to me today.. I was typing a reply, taking my time over it, (to make sure I was right in what I was saying etc etc) only to find I'd been logged out and lost my post  please extend the timeout!
|
|
|
|
|
Knight
Group: Basic Members
Last Login: Sunday, November 02, 2008 10:17 AM
Posts: 75,
Visits: 184
|
|
Just adding another request to extend the auto-logout time limit, I've been caught by it enough to know that it's sensible to write posts somewhere else then copy and paste them in.
I'd suggest that an hour or so would be a suitable time.
James
The Jackal Faction - http://www.jackalfaction.com
Treasure-Trap in Cambridge - http://www.srcf.ucam.org/tt
|
|
|
|
|
Nothing to see here.
Group: Administrators
Last Login: Yesterday @ 9:05 PM
Posts: 451,
Visits: 1,942
|
|
I'll quickly go over two points:
Regarding the "Remember me" login tick, this is completely working as intended, and all we can do is either remove it completely, or leave it in. There is no more I can do about this particular feature, and feel i've explained adequately the reasons it will not always work. If you get auto-logged out by the system (leave a browser open long enough) the cookie dies, and so does your session.
However, regarding the "Timeout", this is not a standard ASP or even .Net timeout, there are several timeouts that can occur based on what state you leave your login in, and what your last x actions are on the forums. This we can do something about, however please be aware its not as easy as changing one time value, as such, i'll note down that this needs attention, and we'll announce as soon as the auto-logouts have been extended.
To clarify: The autologout time WILL be extended. What I may end up doing is extending the autologout when you start writing a post, and then reduce it again when you have submitted a post, dependant on how viable this is. However, we are listening, and attention WILL be given to this problem.
For the interim I apologise for the inconvenience, the current timeout I beleive is between 20 and 30 minutes dependant on what you're doing. I will extend this to somewhere around 45 minutes to an hour.
Regarding the suggestion of remembering everything you have in a form, this is not possible, as whatever you type in the form, is at the client end (yours) and the server has no way of telling what you've written until you hit the "POST" button, or the preview button. One way around this, is to preview your post every 10 - 15 minutes, check it over, and go back to editing, this will keep you logged in indefinately. However I'm only pointing this out as an interim solution, and again state, I will be fixing this in the next week or two. An announcement will be made when this is done.
Rule7: I just work here.
EOS: I just work there too.
|
|
|
|
|
|
| | |