Security Proplem in 4images 1.7.1

[V@no]

Then, I guess, you'll need play with

Code: [Select]

define('COOKIE_PATH', '/');
define('COOKIE_DOMAIN', '');
in includes/sessions.php

[artistichideaway]

Hello V@no,

ok....I'll try to ask my "provider" about that.....thank you.

I realized one thing, the cookie works if I don't close the browser. Once I close the browser and open it again, the cookie is lost.
I think it must be somewhere in the settings on the server, in the sessions settings I have posted yesterday...right?

[artistichideaway]

Hello V@no,

I have finally find the topic with the same problem that I have.
I'm not sure if ti was solved somehow, do you know?

Actually, the two cookies that are set when the user logins in with the "auto login" checkbox checked are NOT getting sent to the browser.  I had a look at your user_loginform.html template and couldn't spot anything wrong there.  The only cookies I got were:  4images_sid, 4images_lastvisit, and 4images_userid.  That last cookie was set to -1 which means "Guest" not logged in and was sent prior to my login attempt which is normal.

http://www.4homepages.de/forum/index.php?topic=4696.0