Auto Login - Is it just me...

[Converse34 1]

or has everyone had to resign into the site much more often recently than in the past? Previously, I could go at least a week if not longer without resigning in, now it seems every other day!! Put it back the old way!

[athena_ny 1]

I haven't had to sign in in over 3 months. So maybe it's just you.

[Kazan' Tiger 1]

Yes, I've noticed this site getting much more buggier...

Sign in sometimes three or four times in a day (annoying); can't read posts because flood control is enabled (very annoying); I go to post, get the "you aren't signed in" message, sign in, and my post gets erased (extremely annoying).

[Zee Bee 61]

I have had to sign in more frequently lately as well.

[Marilyn. 340]

not me...

could be something do do with your computer and how our cookies are set up....

[Jasman0717 8]

Could be the settings in your browser or have you cleared the browser lately?

[Captain Ewok 1,857]

The only thing that causes this is for s small number of ISP's and countries world wide that unfortunately have dynamic DNS settings. We have security set up that detects if your IP changes while you are active on the board. If you leave the site and later on log on from a second computer and IP that is ok however if it instantly changes while browsing the system will log you off because it thinks it might be an XSS attack or attempt to gain access to your member account by another person. When certain ISP's (I have noticed this to be more frequent in some countries in Africa and Russia and even small internet companies in america for example) use the dynamic proxies it can cause members to be logged out (and appear random). This is not a bug or other problem with the site but in fact is for security. In the future there may be a way to give (on a member by member basis) a way to bypass this security check (if they are having trouble staying logged in) however for now there is no way to fix this without disabling the security check completely.

[Captain Ewok 1,857]

I should update to say that this is only a problem if your IP changes in the first two series of numbers, example: xxx.xxx.nnn.nnn

so only if the xxx.xxx changes while you are browsing would this be an issue. People on dialup and other services should only have the nnn.nnn changing so that should not cause problems.

Here is an explaination by a tech guru on this:

The stronghold cookie is based on just the first 2 octets of the IP - on most connections where your IP changes frequently, it's usually only the last (or sometimes the last 2) octets, so it's still not usually an issue.

It would be an issue if you visited work, and then home, especially with a laptop.

The idea is if XSS got through *somehow*, and someone stole your cookie, they wouldn't be able to use your cookies because the IP would be much different, and then the cookies would immediately get overwritten.

If you want to see if your IP is changing go here and check througout the day:

http://whatismyip.com/

[Captain Ewok 1,857]

I wanted to tell everyone that if this is happening to a lot of people I can disable the security feature however hopefully that is not neccesary.

[Ban Hammer 12,836]

I wanted to tell everyone that if this is happening to a lot of people I can disable the security feature however hopefully that is not neccesary.

it happens to me at home and i'm on a fixed ip.

[Boiler 43,433]

Happens to me a lot.

USA, so not a country issue.

Does not seem a problem on any other board I subscribe to.

[Captain Ewok 1,857]

I made a change. Tell me how things work for you guys in the next day.

[Boiler 43,433]

Works now, thanks.

[Converse34 1]

I made a change. Tell me how things work for you guys in the next day.

Yeah, works great now. Thanks for the change!

[Jason-Sasha 1]

I never noticed a problem. Heck, Sasha and I can both be logged in at the same time from two different countries, using the same profile, at the same time. Might not be secure but we like that feature.