Notice in ACP when cookie settings are wrong

General discussion of development ideas and the approaches taken in the 3.x branch of phpBB. The current feature release of phpBB 3 is 3.3/Proteus.
Forum rules
Please do not post support questions regarding installing, updating, or upgrading phpBB 3.3.x. If you need support for phpBB 3.3.x please visit the 3.3.x Support Forum on phpbb.com.

If you have questions regarding writing extensions please post in Extension Writers Discussion to receive proper guidance from our staff and community.
Post Reply
User avatar
callumacrae
Former Team Member
Posts: 1046
Joined: Tue Apr 27, 2010 9:37 am
Location: England
Contact:

Notice in ACP when cookie settings are wrong

Post by callumacrae »

I would find it useful if the ACP displayed a notice if the cookie settings are incorrect, similar to if the install directory is present of config.php is world writable.

~Callum
Made by developers, for developers!
My blog

Oleg
Posts: 1150
Joined: Tue Feb 23, 2010 2:38 am
Contact:

Re: Notice in ACP when cookie settings are wrong

Post by Oleg »

Agreed. Not all errors can be detected but some that can be:

1. Cookie domain not subset of hostname the board is actually on
2. Cookie path not subset of where the board is installed
3. Multiple sets of cookies received (usually with different domains or paths; solution is to change cookie name)

Possibly related: http://www.phpbb.com/community/viewtopi ... &t=2033625

http://www.phpbb.com/community/viewtopi ... &t=2090135
Last edited by Oleg on Thu May 06, 2010 2:55 am, edited 1 time in total.

User avatar
callumacrae
Former Team Member
Posts: 1046
Joined: Tue Apr 27, 2010 9:37 am
Location: England
Contact:

Re: Notice in ACP when cookie settings are wrong

Post by callumacrae »

nn- wrote:1. Cookie domain not subset of hostname the board is actually on
I believe the board can get that wrong sometimes anyway, though?

~Callum
Made by developers, for developers!
My blog

Oleg
Posts: 1150
Joined: Tue Feb 23, 2010 2:38 am
Contact:

Re: Notice in ACP when cookie settings are wrong

Post by Oleg »

It is possible with reverse proxy setups, but since we're talking about warnings both perceived hostname and configured cookie domain can be displayed and the admin will hopefully be able to sort them out.

Post Reply