Register FAQ Search Today's Posts Mark Forums Read
Go Back   JazzJackrabbit Community Forums » Open Forums » General Jazz Jackrabbit Talk

Difficulties Logging Into Cookie-Based Things

Trafton

JCF Member

Joined: Oct 2002

Posts: 3,589

Trafton is an asset to this forum

Sep 13, 2003, 12:22 PM
Trafton is offline
Reply With Quote
Difficulties Logging Into Cookie-Based Things

This has been happening to me on both J2O and the JCF, but J2O moreso. Whenever I log in, the session quickly expires yet Who's Online still shows me as logged in. On J2O, I cannot login at all; the session simply expires suddenly. I cannot even click on private messages. Yet it still displays me as logged in. I have tried deleting all of my temporary files, emptying cookies, etcetera. I am running WinXP with IE6.

EDIT: Moved to Technical Help, because it is probably a technical issue as it seems to affect a few other forums I visit.

~ Traft
Cpp

JCF Member

Joined: Mar 2001

Posts: 1,557

Cpp is doing well so far

Sep 13, 2003, 12:31 PM
Cpp is offline
Reply With Quote
Sounds like a cookie read/access problem. Have you tried lowering your internet security settings?
Tools => Internet Options => Security/Privacy
__________________
<a href="http://nmap.org/"><img border="0" alt="Nmap Security Scanner" src="http://images.insecure.org/nmap/images/prop/nmap_bnr_matrix_pfos.gif"/></a>
Trafton

JCF Member

Joined: Oct 2002

Posts: 3,589

Trafton is an asset to this forum

Sep 13, 2003, 12:33 PM
Trafton is offline
Reply With Quote
Thanks for the reply.

It is currently at medium. I have had no problems previously at this level and would rather not lower it. I previously got an OCX error when removing either cookies or files (do not remember which) reading "Error unregistering the OCX C:\WINDOWS\MCBin\Shared\MGBrwFld.dll". I have tried lowering the security settings...no difference.

~ Traft
Cpp

JCF Member

Joined: Mar 2001

Posts: 1,557

Cpp is doing well so far

Sep 13, 2003, 12:37 PM
Cpp is offline
Reply With Quote
Do you have a firewall? I remember when I had ZoneAlarm I was unable to stay logged in on JCF nor on J2O. If you have firewall try temporarily turning it off and see if anything happens. If not then is JCF/J2O the only website where you are unable to stay logged in?
__________________
<a href="http://nmap.org/"><img border="0" alt="Nmap Security Scanner" src="http://images.insecure.org/nmap/images/prop/nmap_bnr_matrix_pfos.gif"/></a>
Trafton

JCF Member

Joined: Oct 2002

Posts: 3,589

Trafton is an asset to this forum

Sep 13, 2003, 12:38 PM
Trafton is offline
Reply With Quote
Firewalls are not the problem in this case; I am aware of the ZA bug. While I use J2O more than most other sites, I have had problems with a PHPBB-based board, too.

~ Traft
Cpp

JCF Member

Joined: Mar 2001

Posts: 1,557

Cpp is doing well so far

Sep 13, 2003, 12:43 PM
Cpp is offline
Reply With Quote
PHPBB? Hmm... J2O uses PHP, JCF uses PHP, PHPBB uses PHP... I wonder if PHP has something to do with it. Are PHP websites the only sites where you are unable to stay logged in?
__________________
<a href="http://nmap.org/"><img border="0" alt="Nmap Security Scanner" src="http://images.insecure.org/nmap/images/prop/nmap_bnr_matrix_pfos.gif"/></a>
Trafton

JCF Member

Joined: Oct 2002

Posts: 3,589

Trafton is an asset to this forum

Sep 13, 2003, 12:45 PM
Trafton is offline
Reply With Quote
So far that I have seen, yes, but I am not one hundred percent sure. Most of the login-based sites I visit use PHP.

~ Traft
Cpp

JCF Member

Joined: Mar 2001

Posts: 1,557

Cpp is doing well so far

Sep 13, 2003, 12:53 PM
Cpp is offline
Reply With Quote
It appears PHP is having trouble accessing cookies on your computer tho it might be a internet security problem as well. I don't have much PHP knowledge so I can't help here. I'm just beginning to learn it though I doubt PHP is the source of the problem. It is more likely a misconfiguration on your PC. I'm out of ideas.
__________________
<a href="http://nmap.org/"><img border="0" alt="Nmap Security Scanner" src="http://images.insecure.org/nmap/images/prop/nmap_bnr_matrix_pfos.gif"/></a>
Trafton

JCF Member

Joined: Oct 2002

Posts: 3,589

Trafton is an asset to this forum

Sep 13, 2003, 12:58 PM
Trafton is offline
Reply With Quote
Thank you for the suggestions. I have tried nearly every possible combonation of everything, and I guess that it could be a problem caused by a recent system restore or something. The JCF seems to have stopped doing it, but I still cannot login on J2O. Thanks for your help anyway.

Suggestions are still quite welcomed.

~ Traft
Old Sep 13, 2003, 03:36 PM
Trafton
This message has been deleted by Trafton.
Bobby aka Dizzy

(-)(-)(-)(-)(-)istrator

Joined: Jan 2001

Posts: 1,560

Bobby aka Dizzy is doing well so far

Sep 13, 2003, 07:24 PM
Bobby aka Dizzy is offline
Reply With Quote
I suggest that you try clicking the Delete Cookies button in Tools->Options or equivalent button in other browsers.
Link

Untitled

Joined: Apr 2001

Posts: 2,099

Link is doing well so far

Sep 13, 2003, 09:01 PM
Link is offline
Reply With Quote
I suggest using a network sniffer to see the HTTP headers during connections. Specifically, pay attention to the Set-Cookie header from the server and the Cookie header from the client. See if and when they are being sent, and if they match.

(J2O uses gzip compression, but that only affects the content part, not the header part)
__________________
With our extreme gelatinous apology,
We beg to inform your Imperial Majesty,
Unto whom be dominion and power and glory,
There still remains that strange precipitate
Which has the quality to resist
Our oldest and most trusted catalyst.
It is a substance we cannot cremate
By temperatures known to our Laboratory.

~ E.J. Pratt
 
Trafton

JCF Member

Joined: Oct 2002

Posts: 3,589

Trafton is an asset to this forum

Sep 13, 2003, 09:23 PM
Trafton is offline
Reply With Quote
Quote:
Originally Posted by Link
I suggest using a network sniffer to see the HTTP headers during connections. Specifically, pay attention to the Set-Cookie header from the server and the Cookie header from the client. See if and when they are being sent, and if they match.

(J2O uses gzip compression, but that only affects the content part, not the header part)
...You may be going a bit over my head with that... ;-P

~ Traft
Link

Untitled

Joined: Apr 2001

Posts: 2,099

Link is doing well so far

Sep 17, 2003, 04:07 PM
Link is offline
Reply With Quote
Quote:
Originally Posted by Trafton
...You may be going a bit over my head with that... ;-P
Well it's the only diagnostic thing I can recommend right now. Get Ethereal and use the capture filter "tcp port 80".

Right-click on one of the packets (after capturing) and choose "Follow TCP stream". This shows all the traffic to and from the J2O server in text format. The cookie lines start with "Cookie:" and "Set-Cookie:". HTTP headers are very human-readable.
__________________
With our extreme gelatinous apology,
We beg to inform your Imperial Majesty,
Unto whom be dominion and power and glory,
There still remains that strange precipitate
Which has the quality to resist
Our oldest and most trusted catalyst.
It is a substance we cannot cremate
By temperatures known to our Laboratory.

~ E.J. Pratt
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On

Forum Jump

All times are GMT -8. The time now is 05:40 PM.