Automatic logon broken

[broadblues]

it seems the cookie is not set?

A cookie *must* be set else, you could not log in at all.

i removed my old one and there is no new one stored.

regards...
michael

It could have changed to temporary cookie or one with a shorter expiery time perhaps?

[Raziel]

There is no cookie.

I just checked again with Odyssey cookie list and there is absolutely nothing regarding hyperion-entertainment.biz.

I can log on, but as soon as i leave the site and come back immediately i have to log in again.

There are hyperion cookies in the sql .db file, but they don't come up in Odysseys cookie list

[broadblues]

Hmmm okay testing a bit more, it seems the session ID to enable login is being sent in the URL. Side stepping the need for a temporary cookie.

The reason I could post without logging in was that I used URL completion and effectively preserved the session ID< which hadn't expired yet.

Ugh. That feels a fraction insecure! Were I to post the URL you might be able to login as me!

[Raziel]

Hmmm okay testing a bit more, it seems the session ID to enable login is being sent in the URL. Side stepping the need for a temporary cookie.

The reason I could post without logging in was that I used URL completion and effectively preserved the session ID< which hadn't expired yet.

Ugh. That feels a fraction insecure! Were I to post the URL you might be able to login as me!

Ouch...
Hopefully some of the maintainers are monitoring this

[ssolie]

Hopefully some of the maintainers are monitoring this

Try emailing webmaster@hyperion-entertainment.com

[Cyborg]

All requests are now redirected to use the .com domain. This broke the cookie settings, which were still using .biz. Fixed now.

[tonyw]

Yes, fixed now, thanks, Costel.

[Raziel]

Thank you, Costel