Issues logging in?

[Psychoholic]

So I've seen that a few people are having a hard time logging in and staying logged in.

technical explanation:
When I upgraded the board, I set the cookie path with a wildcard for www.nationalhearse.net and nationalhearse.net (but not .org) - originally it was set to just the www.nationalhearse.net one and if someone linked to a picture that was set with the domain without the cname alias, then it wouldn't show up because it didn't think you were logged in at the non-www address.

If you are having problems staying logged in, I would almost put money on the fact that there is a stuck cookie for this board on your system. In firefox you will nee to go to preferences and the security tab, pull up the cookies and search for nationalhearse.net - and delete them all. Then log into the site - if you go back and look at the cookies, you'll see that they are for the domain ".nationalhearse.net" (note the period at the front).

I wish there was something more I could do on my end, but it's just not a server side issue.

[LMS]

You should make this a sticky for a while so everyone having problems sees it.

[EvilManor]

I didn't even realize the .net domain was valid. I've always used the .org url so that's probably why I've been having problems. Thanks!!!

[Psychoholic]

I was going to do the wildcard for .nationalhearse. so that it would use either of the domains - but then I figured that if someone got creative with a cname they could use cookies from this site (like if I did nationalhearse.psychoholic.net then the cookie would appear to be valid due to the wildcard at the end letting anything afterwards count - but if you specify the TLD with nothing appending ONLY sites that end with nationalhearse.net will work - including 'forums.nationalhearse.net'). With access to the password cookie (even with an md5 hash) you could potentially decrypt someones password, and since so many people use one password for everything (shame on you), they could gain access to most of your shit. So I opted against it.

I'll go ahead and sticky this too.

[mdeanr]

before you told me to reset my password on the nationalhearse.net link, i was always logging in using the dead-ends.com side. now i use nationalhearse.net .

[Tweek's Turbos]

I had the problem but not today. Thank's for working it out.

[Scary Guy]

Staying logged in hasn't been a problem either. I've been signed in for hours now

[Scary Guy]

never mind, it's doing it again.

[Morella]

I'm doing OK so far. I changed a setting in IE to allow form logins across domains.

-d

[Morella]

I switched to Firefox. I've found, just as with IE, that I still have to log in every time I open a new browser. It used to just come up with me logged in. Firefox seems to be keeping me logged in so far, though. I know that this must be an NHAA thing because all other sites work the way they used to. I just pull the bookmark and it tells me "welcome back", instead of "Who the fuck are you?"

Hopefully this info is helpful. It's intended in that spirit, not just to be bitchy.



-denise

[Psychoholic]

Are you logging into http://www.nationalhearse.net/forums/index.php or coming in on another domain?

[Morella]

This is most likely the problem for me. A few years ago, I was unable to see pictures, and you told me to come through the DHA link, which fixed that problem, and perhaps created this one.

I came through nationalhearse.net this time, closed the browser and came back, and I'm still me, so maybe that's got it.

-denise

[Psychoholic]

kick ass!