PDA

View Full Version : INVALID_SESSION Errors


Spider
28-08-2003, 09:13 PM
How come sarah and TT are mods ANd im not ?? im probably the most experianced in here to be a modd or even an admn! as i run my own forum! and i have second highest post count !!!

and i have had promises to be 1?? well Y GOD Y??

Tark
28-08-2003, 09:38 PM
Sarah and TT?? Thats news to me. No offence to them but Sarah said she cant get on here and TT is never here??

Dan
28-08-2003, 10:11 PM
i dunno... keep up with the threwads ppl heh :)

We were talking about having a women only forum, and a blokes only forum... and thats the only way i could figuire out how to make it so that only blokes could view and post in one and women in the other.... so calm it! 8)

Sarah cant get on here until she changes her dial-up provider, which will be a few days. There are known problems with phpBB 2.0.4 upwards with AOL users.
For those interested in the technical reasons, its basically to do with the way the sessionID's work in conjunction with a users IP addy. You may have noticed when you log in, for the first few pages you get a sessionID in the URL.. well everyone who logs on gets a unique one and only your IP at that time can use it.
AOL use proxy farms, and so to the BB, the users IP is changing every few seconds... so the BB gives the AOL user a sessionID matched to their IP, then their IP changes and BANG... INVALID_SESSIONID errors occur.

The matching of a users session id and their ip can be disabled, but it leaves a massive security hole open - for example, if i was logged in as admin, and someone managed to find out my sessionID, they could append that ID to the URL of say the admin interface, and voila! total access to the admin section of the forum. So for the time being im afraid there's nowt i can do other than get the 2 people in the world who still use AOL to change to a propper provider.

Tark
28-08-2003, 10:29 PM
Ok ok i understand. Chatted on MSN anyway.

Spider
30-08-2003, 01:25 AM
Yeah in lamans terms AOL SUCKS!!! I H8 IT


http://images.deviantart.com/large/indyart/indymisc/gAyOL.gif

Spider
22-11-2005, 10:32 AM
guess what ISP IM NOW USING GRRR NOT THRO CHOICE