The hack uses an extra cookie: bbcookietime. Maybe your browser blocks it?

If not, then recheck, if you didn't forgot to apply something.

And then, could you please try, if you can post, even, if you have to login over and over.

I did some testing on our public board. And it seems to work without problems "for users!"

But I couldn't login to the admin-cp, if I haven't logged in to the forums homepage. I've had to be logged in to the forums homepage, before I could login to the adminpanel.

Sorry, but right now I have no idea, how to fix this. :o

Any help, sorting that out, would be welcome.

Stadler: One detail I forgot to mention....

My main page is not a PHP/VB page. It's an html page, in which I simply integrated the login code. Thus, I removed the "forums" icon from the navbar, and Im not allowing any access to un-registered users.

This means... You get into my page... must register if you're a new user, or just login if you're already registered. As soon as you login, you're taken to the forums page. If you click on Logout icon on the navbar, your taken back to the main page, where you must sign if you want to get back into the forums. BUT if for some reason, a user enters http://mydomain.com/forums in his/her browser, it will be taken back to the forums...and logged-in, since the LOGOUT icon it's not really login-out.

Here's the what I have in the logout icon.. which I know is NOT correct.. Therefore, the need for your hack... BUT as you already noticed, I can't login even as Admin, since I have to be logged in in the forums first...

Any news on this?

Anyone knows if I can use a Javascript to do what I need? I mean a script that will "call" the llogout function and then re-direct to my main page?

Cool :). However, the hack still isn't very secure - the MD5 algorithm is known, so someone could change the date and then md5 the changes as well. Now that I think about, you're right that you don't need to save all login time. But I would rather use a variant of md5 to store the date. Checking it to make sure the date still equals the md5($date . "randomstringtochangemd5") would make the system secure, as long as everyone can come up with a constant random string to append to the date for the md5.

Sounds like a cool idea...

Can anyone confirm that it works?:)

Satan

Can you install it and set up a test account on your board and have someone log in and out and you do that right after them and see if it allows you on? Will that work?