Challenging post data preservation problem

[SteveCoppin]

Our system sits behind a seperate authentication layer. When the authenticated user details are passed to our vbulletin instance we auto log the user in via code we have placed in global.php.

(if you need any more info on this to answer the question below, please ask)

The problem we are facing is that when the session times out, for example while creating a new post, the post data is lost on it's way to the next page. I think this could be due to the do_login_redirect() function, which doesn't appear to preserve post data.

In short, my question is: how do you preserve post data when passing between pages?

[Dismounted]

You'll have to pass the data around, as if it is not passed around, it will be lost. Although the user could just go back and it (should) still be there.

[SteveCoppin]

Thank you.

Any advice on the best way to pass it around?

I can't see in the code base an example of how to store $_POST in the postdata GPC string variable, but i think this might be the answer. Is this what that field is intended for?

[Dismounted]

$vbulletin->GPC is an array of all values that have been run through the input cleaner.

[SteveCoppin]

The $postvars variable in do_login_redirect() (of functions_login.php) is being populated by the values I have put in to $vbulletin->GPC['postvars'], however the vars are still not being retrieved by the next page.

It appears that the method does not work as I though it might..

Any idea how I can get the values in to newreply.php from the do_login_redirect page?

Hope this makes sense..

[SteveCoppin]

Posting about this a couple of days ago but didn't get a complete answer..

I have written a Single Sign On (SSO) script that sits in my global.php The script takes credentials from the header and uses them to log the user in. The problem arises when the users session is interrupted and the have to be re-logged in. When this happens, they are logged in and do_login_redirect() is called. Somewhere down the line the post data ($_POST) isn't being carried through to the next page.

So, for example:

The user logs in and goes to post a reply. Takes longer than the timeout to write the reply and when they post the login process is kicked off. Behind the scenes the user is logged in and passed back to newreply.php, but the POST data is missing, leaving the user with no new post and just a friendly blank screen.

Does anyone have any idea how I can get around this.. A couple of ideas:

- Store the POST data somewhere where I can retrieve it again
- Not to redirect (but currently I am greeted with another blank screen when I comment out)

I have tried both of these but have had no luck. I'm very nearly out of ideas and patience and would really appreciate some help!!

If you don't understand the problem but would still like to help, please ask questions!