|
Re: Page expired (V2.7.2) [message #28373 is a reply to message #28372] |
Thu, 20 October 2005 18:46 |
Ilia
Messages: 13241 Registered: January 2002
Karma: 0
|
Senior Member Administrator Core Developer |
|
|
The fix for this problem was available for a very long time, nothing changed to this affect. I suspect that the problem was the user's cookie/session actually expired and they were logged out of the system.
If the sequence key expires, which I suspect what you tested you don't lose anything, simply are required to re-submit the page.
To prevent possible logouts after long periods of inactivity try to disable URL sessions in your forum.
FUDforum Core Developer
|
|
|
|
|
Re: Problem is recurring in V2.7.5 (Re: Page expired (V2.7.2)) [message #32588 is a reply to message #32583] |
Mon, 10 July 2006 18:50 |
Ilia
Messages: 13241 Registered: January 2002
Karma: 0
|
Senior Member Administrator Core Developer |
|
|
No, the behavior you describe sounds norm, #1 in neither case the user is logged out. Only the session key expires, once they browse to any non-submit page the session key is renewed. When they get the post error, they only need to click submit again to have it go through.
FUDforum Core Developer
|
|
|
|
|
|
|
Re: Problem is recurring in V2.7.5 (Re: Page expired (V2.7.2)) [message #32624 is a reply to message #32604] |
Tue, 11 July 2006 21:55 |
Ilia
Messages: 13241 Registered: January 2002
Karma: 0
|
Senior Member Administrator Core Developer |
|
|
Sequence key is a session validation key, that prevents session take over by 3rd parties.
Basically if a user opens a message posting screen and then browses the forum in another window the session key in the original window expires. This means when the user goes back to the post form they get an error message telling them that session key expire and asks them to re-submit the form. If they do that message gets posted.
FUDforum Core Developer
|
|
|
Re: Problem is recurring in V2.7.5 (Re: Page expired (V2.7.2)) [message #32767 is a reply to message #32624] |
Wed, 19 July 2006 22:37 |
|
Astoria
Messages: 227 Registered: April 2004
Karma: 0
|
Senior Member |
|
|
I have done some analysis. The people who seem to be encountering this problem are showing up with "last_login" set to 0 in the user table. What would cause this value to be reset to 0?
(They can reply but get the "session expired" message when they try to start new threads).
None of my code changes have touched users.inc.t nor any of the variables associated with the error message.
addendum: having them delete their cookies and log in again seems to fix the problem.
[Updated on: Fri, 21 July 2006 16:03] Report message to a moderator
|
|
|
Re: Problem is recurring in V2.7.5 (Re: Page expired (V2.7.2)) [message #32813 is a reply to message #32767] |
Sun, 23 July 2006 13:25 |
Ilia
Messages: 13241 Registered: January 2002
Karma: 0
|
Senior Member Administrator Core Developer |
|
|
This field gets updated everytime the person logs in. The only way I could see how it'd remain at zero is if the maximum time between logins (config value) is set to a very high parameter. This said this value is just for reference and is not used for anything but to restrict login hammering.
FUDforum Core Developer
|
|
|
Re: Problem is recurring in V2.7.5 (Re: Page expired (V2.7.2)) [message #33366 is a reply to message #32813] |
Mon, 28 August 2006 19:08 |
|
Astoria
Messages: 227 Registered: April 2004
Karma: 0
|
Senior Member |
|
|
I might have had a problem with too high of a login expire, and have reset it back to the default. My posters using Firefox were able to delete their cookies, log back in, and are not currently experiencing the problem.
However, my Internet Explorer posters consistently encounter this problem, even after deleting cookies.
Here is the progression for IE users:
- user tries to start a new topic with a lengthy post (several paragraphs, I haven't found the exact threshold).
- "session expired" message appears
- user cannot submit the topic no matter what they try, they just keep getting "session expired" appearing at the top of their post entry form. (Notes: if they have previewed, the preview disappears. Also, in Firefox if a session expires, the message comes up in a new window, not at the top of the form).
If the IE user posts the exact same post that they were unable to post as a new topic, as a reply instead, the post goes through.
Any thoughts on what could be happening?
Thanks
|
|
|
|
|
|
Re: Problem is recurring in V2.7.5 (Re: Page expired (V2.7.2)) [message #33385 is a reply to message #33376] |
Tue, 29 August 2006 13:53 |
Ilia
Messages: 13241 Registered: January 2002
Karma: 0
|
Senior Member Administrator Core Developer |
|
|
I just tried the following in IE on WinXP:
1) Went to a forum
2) Click "create new topic"
3) Entered a subject
4) Pasted entire text content of slashdot.org front page (lots of text, easily 2-4kb of text)
4) Clicked preview
5) Clicked "create new topic" button below the preview.
Got a new topic created with no errors.
FUDforum Core Developer
|
|
|
|
Re: Problem is recurring in V2.7.5 (Re: Page expired (V2.7.2)) [message #33400 is a reply to message #33388] |
Wed, 30 August 2006 14:14 |
Ilia
Messages: 13241 Registered: January 2002
Karma: 0
|
Senior Member Administrator Core Developer |
|
|
I've just used IE on WinXP system on this forum in an attempt to replicate the reported problem.
I've creating a topic, with and without a preview or even posting a reply. And in neither case was I able to replicate the reported problem.
FUDforum Core Developer
|
|
|
Re: Problem is recurring in V2.7.5 (Re: Page expired (V2.7.2)) [message #33430 is a reply to message #33400] |
Thu, 31 August 2006 23:22 |
|
Astoria
Messages: 227 Registered: April 2004
Karma: 0
|
Senior Member |
|
|
I just tried it again on a different computer and got the same thing. One window - logged in, posted contents of the above text file, tried to create topic. "Session Expired".
My other computer was running XP-SP1, browser and IE updated to latest security releases.
The computer I just repeated it on is running on XP-SP2 updated to latest security releases. The browser is IE version 6.0.2900.xpsp_sp2_gdr.0050301-1519. Probably default options since I don't normally use it. "About" says "Cipher Strength: 128-bit.
addendum: "Block pop-ups" was set to "on", with no exceptions.
-added fudforum.org to "allow" list. Still get "session expired" message.
[Updated on: Thu, 31 August 2006 23:29] Report message to a moderator
|
|
|
|
Re: Problem is recurring in V2.7.5 (Re: Page expired (V2.7.2)) [message #33464 is a reply to message #33444] |
Fri, 01 September 2006 20:28 |
|
Astoria
Messages: 227 Registered: April 2004
Karma: 0
|
Senior Member |
|
|
It doesn't work for me in IE, on multiple computers both here and at my forum, nor for my IE users, including one who's an admin.
Did you try to post it as a reply or as a new topic? As a reply works fine for me. As a new topic does not.
The only thing I can think of is it could be some difference in security settings between the browsers where the problem occurs and the one that you are using. Do you have the most recent version of IE? What pieces of info could it possibly be blocking via user options that would make the session check think it had expired when there have been no other windows opened? Do you have fudform.org placed in the "trusted zone" on your security levels?
[Updated on: Fri, 01 September 2006 21:51] Report message to a moderator
|
|
|
Re: Problem is recurring in V2.7.5 (Re: Page expired (V2.7.2)) [message #33483 is a reply to message #33464] |
Mon, 04 September 2006 13:46 |
Ilia
Messages: 13241 Registered: January 2002
Karma: 0
|
Senior Member Administrator Core Developer |
|
|
I've tried both replying and creating a new topic with the exact text you've provided. As I've said before my IE DOES NOT have any security exceptions for fudforum.org in place.
The privacy level in IE is set to "medium high" and the pop-up blocker is enabled. The security settings are set to "high".
FUDforum Core Developer
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Re: Page expired (V2.7.2) [message #34944 is a reply to message #34939] |
Sun, 26 November 2006 16:19 |
Ilia
Messages: 13241 Registered: January 2002
Karma: 0
|
Senior Member Administrator Core Developer |
|
|
It would be interesting to see precisely what text causes the problem. Perhaps a word document can be created with the "break" text and posted on this forum.
FUDforum Core Developer
|
|
|
|