Bug in version 3.5 RC3 (users get logged out unexpectedly)

[Brad]

I've been seeing people hitting this bug all day so I thought it would be a good idea to post an announcement related to it.

Basicly people are begin logged out of the forum at random times, personaly I've only hit the bug once but others seem to get it all the time.

Freddie posted this fix here (http://www.vbulletin.com/forum/showpost.php?p=962214&postcount=6)

Open class_core.php

Find:

vbsetcookie('sessionhash', $sessionhash, 0);

Replace with:

if (!defined('SKIP_SESSIONCREATE'))
{
vbsetcookie('sessionhash', $sessionhash, 0);
}

[Oblivion Knight]

Thanks for the pointer, Brad.

None of my users had reported anything, but I've fixed the mentioned file anyway.

[Floris]

Users from vbfans reported this, so I have fixed it :)

[bigcurt]

I also had someone report this on a forum I work at. Thanks alot :)



~Curt

[Paul M]

As I recall - it's only a problem if you don't use "remember me" isn't it.

[Marco van Herwaarden]

And it seems to happen more often if you are also logged into ACP and using FF. But that might be coincidence.

[Protoman]

I was starting to wonder why I had to login so many times in 20 minutes. :D

[hydrostatic]

RC3 seems to be bug-full... First it was the "Members Viewing This Thread" and now it's this? Wow, maybe RC3 won't be the last RC of 3.5. At least RC1 and RC2 didn't have bugs that were this conspicuous...

Well, it doesn't happen on my forum. But I applied the fix anyway.

[Brandon Sheley]

soory, but where is class_core.php ?

[Andreas]

Where it should be :)
In includes

[Brandon Sheley]

ah thx :) i was looking in the root :P


edit.. made the changes, boards still up :) keep up the good work..

[Toky0]

Thanks for the fix. I added it even though I haven't experienced it yet. :nervous:

[artonex]

thanks for the fix brad :)

[Blam Forumz]

thanks for the fix :D

[stan111]

i am using V3.0.7
i can't find classcore.php in the include ?

[Brad]

i am using V3.0.7
i can't find classcore.php in the include ?

This bug does not effect the 3.0.x code. We are talking about 3.5 :).

I've edited the thread title to point that out.

[uae]

Had some members waiting on the door to get into my forum, here we got the fix.
Thanks Brad :)

[Logikos]

I was wondering why I kept keeing logged out of vB.com! Thanks man..

[loonytune15]

applied the fix, my thanks.

[Chad F.]

I applied the fix yesterday but I'm still getting complaints that people are being logged out unexpectedly..:(

[Marco van Herwaarden]

Let them clear their cookies.

[xlguy]

We've had users clear their cookies, and check their privacy settings are default to Medium and we're still getting random logouts on 3.5.3. The plugins we have are:
Archive Adsense 1.0
Edit New Thread Button 1.1
Extended Signature Limits 1.0.3
Form Hack 3.3
HELLCATs Realtime Page Compressor 1.24
Moderator Stats 1.2
Reported post creates new thread 2.01
Security Fix for Issue in vBulletin 3.5.3
SigmaChat 1.0.0 SigmaChat integration
Strike Through Closed Threads 1.0.0
I can't see how any of these would affect it. Such a strange issue this, there are plenty of people reporting it across vB.com and .org but at the same time plenty of people without the problem. I wonder what the common link is?

[Marco van Herwaarden]

Upgrade to 3.5.4
Reset your cookie domain/path to default.
Create a new Style with no Parent set, let your members use this new style, and see if they still have problems.
Try disabling the Page compressor hack.
Turn off GZip-compression in your vBulletin Options.
If still problems, disable all hacks.
Make sure your members who are reporting this are checking Remember Me box when logging in.
What is the setting for you Cookie timeout?

[michaelbenson]

We've had users clear their cookies, and check their privacy settings are default to Medium and we're still getting random logouts on 3.5.3. The plugins we have are:
Archive Adsense 1.0
Edit New Thread Button 1.1
Extended Signature Limits 1.0.3
Form Hack 3.3
HELLCATs Realtime Page Compressor 1.24
Moderator Stats 1.2
Reported post creates new thread 2.01
Security Fix for Issue in vBulletin 3.5.3
SigmaChat 1.0.0 SigmaChat integration
Strike Through Closed Threads 1.0.0
I can't see how any of these would affect it. Such a strange issue this, there are plenty of people reporting it across vB.com and .org but at the same time plenty of people without the problem. I wonder what the common link is?
Perhaps it would be best to actually upgrade to the later versions and not just apply security fixes/patches? I havent personally encountered this error and i seem to be using some similar modifications to you too.

[xlguy]

Upgrade to 3.5.4
Reset your cookie domain/path to default.
Create a new Style with no Parent set, let your members use this new style, and see if they still have problems.
Try disabling the Page compressor hack.
Turn off GZip-compression in your vBulletin Options.
If still problems, disable all hacks.
Make sure your members who are reporting this are checking Remember Me box when logging in.
What is the setting for you Cookie timeout?

Thanks for this Marco, I have already tried resetting the cookie path. The timeout is the default (900 I think?). At the moment users are indeed using a child style, so I will give your suggestion a go. As for "Remember Me" I have that set to checked automatically. The problem was happening before Page compressor so I'm confident it's not that. Cheers.