Help save net neutrality! Learn more.
Close

#827 IIS : Remember me doesn't

All_versions
closed-accepted
nobody
5
2005-03-17
2003-09-19
No

Windows and IIS.

I have the remember me option turned on with a duration
of 1 week. When I log in, I check 'remember me.' If I
close my browser and open it again, I am prompted to
enter my user name and password, on both IE and Mozilla.

Discussion

  • Philippe Cloutier

    Logged In: YES
    user_id=738765

    I can't get this bug with Windows XP, Apache, FireBird, IE
    and 1.7.1.1.
    Would you try creating a new tiki database to see if it does
    the same?
    Else can you test with Apache?

     
  • Philippe Cloutier

    • status: open --> open-works-for-me
     
  • Terris Linenbach

    Logged In: YES
    user_id=155319

    This seems to be an IIS problem. If you don't use IIS,
    someone else will have to look into it. I would, but I
    don't know where to start. By the way, I've already
    resolved one pervasive problem for IIS, the fix is even in
    the bug description, but none of the committers have taken
    it on. Also, I don't want to be a committer. :)

     
  • Philippe Cloutier

    Logged In: YES
    user_id=738765

    OK, where is this patch?
    I don't use IIS anymore, sorry.

     
  • Terris Linenbach

    Logged In: YES
    user_id=155319

    See bug 790988

     
  • Dennis Daniels

    Dennis Daniels - 2003-12-09
    • status: open-works-for-me --> closed-out-of-date
     
  • Philippe Cloutier

    • milestone: 337037 --> All_versions
    • summary: Remember me doesn't --> IIS : Remember me doesn't
    • status: closed-out-of-date --> open-accepted
     
  • Philippe Cloutier

    Logged In: YES
    user_id=738765

    This was closed due to lack of updates but I reopen and
    accept supposing this is on all versions since I found two
    other reports of this, one new tagged 1.8.3.
    An old one is [ 738719 ] buglist, Win2K/IIS/Russian
    content/CVS version. The new one is [ 1020919 ] Remember Me
    feature broken under IIS

     
  • artemisimo

    artemisimo - 2004-09-04

    Logged In: YES
    user_id=1114914

    I have downloaded 1.9.RC2. The Remember Me feature is
    also not working in that release under IIS / IE.

     
  • artemisimo

    artemisimo - 2004-09-04

    Logged In: YES
    user_id=1114914

    Here's additional information about this issue under IIS and
    how I got around it.

    Running under IIS 5.0, the remember me feature is not
    working for version 1.8.3 (or 1.9.RC2). It appears to me the
    problem may be that cookies are being sent with the page
    redirections. If instead the cookies were to be sent on
    a successful page download rather than on the redirection,
    this feature would work.

    I mocked up a set of changes to verify this assumption.
    The hack involved passing the hash value for the user
    logging in to the next page that is displayed. The tiki-
    setup.php page was then modified to recognize a logged-
    in user and to set the remember-me cookie using the
    hash value that was supplied via a query string. Finally,
    the tiki-logout.php page was modified to display
    a "logged out" message before it redirected the user to
    the tiki-index.php page using a client-side javascript
    statement to set the location variable. These steps
    fixed the remember-me feature bug I was experiencing.

    This change demonstrates 1 way this issue could be fixed.
    I'm sure someone with more knowledge of the code could find
    a way to do this without having to resort to additional query
    string variables as I did during my testing.

     
  • bertrand Gugger

    bertrand Gugger - 2005-03-17

    Logged In: YES
    user_id=379264

    Hello,
    This is a broadcast message for all open bugs left before 2004/01/05.
    We hope it was checked but no bug update took place.
    The bug you reported may have been fixed.
    Additionally, if you are using an older form of TikiWiki,
    it is highly recommended you update at least to 1.8.5
    with new security fixes.

    So we open a procedure over the 2 next weeks:
    Please, check your bug or request.
    If you feel it's not relevant anymore, then close it.
    But, if you mind it's still current,
    we invite you to open a new fresh request.

    At the end of this period,
    an automatic cleaning with notifications will take place.

    Tikily yours,
    --
    Tikiwiki Bugs Cleaners
    (contact ---> toggg)

     
  • bertrand Gugger

    bertrand Gugger - 2005-03-17
    • status: open-accepted --> closed-accepted
     

Log in to post a comment.