vb.org Archive - [FIX] Session Cookies

As you might guess from looking at our forums, we have some security-minded users. Quite a few will never accept cookies and never register-- our guest vs. member ratio online is usually 3:1.

Some users will register but still not accept cookies, even though we have online tutorials on how to destroy them after every session. As they are, vB and the PM hack both really want the user to have cookies enabled. We're now suggesting for those registered users who have a fear of cookies to only allow "Temporary" or "Session" Cookies. These are never written to the hard drive and are erased from memory when you close the browser.

vB required one small edit to global.php to allow the users to have session instead of permanent cookies. Of course the permanent ones still work.

in global.php find:

Code:



setcookie("bbuserid",$userinfo[userid],mktime(0,0,0,0,0,2020),$cookiepath);

setcookie("bbpassword",substr(md5($userinfo[password]),0,strlen($userinfo[password])),mktime(0,0,0,0,0,2020),$cookiepath);

and change that to:

Code:

setcookie("bbuserid",$userinfo[userid],0,$cookiepath);

setcookie("bbpassword",substr(md5($userinfo[password]),0,strlen($userinfo[password])),0,$cookiepath);



setcookie("bbuserid",$userinfo[userid],mktime(0,0,0,0,0,2020),$cookiepath);

setcookie("bbpassword",substr(md5($userinfo[password]),0,strlen($userinfo[password])),mktime(0,0,0,0,0,2020),$cookiepath);

It will first write a temporary cookie and then if allowed, overwrite it with a permanent one. This allows temp-cookie browsers to use Private Messaging and even stay logged in while they surf during that session.

[Edited by Overgrow on 09-28-2000 at 11:50 AM]

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.01064 seconds Memory Usage 1,711KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (2)bbcode_code_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (1)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: