FUDforum: FUDforum 3.0+ » Session Referrer Check not at login?

Home » FUDforum Development » FUDforum 3.0+ » Session Referrer Check not at login?

Show: Today's Messages :: Polls :: Message Navigator

Session Referrer Check not at login? [message #30212]

Sat, 11 February 2006 22:55

Xonk

Messages: 67
Registered: March 2004

Karma: 0

Member

Hi,

one suggestion: Disable the referrer Check at login.
The problem is, when a user starts the forum with 'url.de', and uses the fast-login via the homepage, the user will be redirect to 'www.url.de' and the session is killed. So the user have to login two times.

Greets,

Sven

Report message to a moderator

Re: Session Referrer Check not at login? [message #30214 is a reply to message #30212]

Sat, 11 February 2006 22:58

Ilia

Messages: 13241
Registered: January 2002

Karma: 0

Senior Member
Administrator
Core Developer

Referer check is something you can disable yourself via the forum's settings.

FUDforum Core Developer

Report message to a moderator

Re: Session Referrer Check not at login? [message #30217 is a reply to message #30214]

Sat, 11 February 2006 23:13

Xonk

Messages: 67
Registered: March 2004

Karma: 0

Member

Thanks for this fast answer Smile

.

Ok, I can disable it, but I think, that this feature is useful to prevent session-takeover when a user publish a link with his session-ID (and don't uses cookies). Or is it wrong, what I'm thinking about the referrer check?

When it is correct, a additional control to diable the check at login when basically enabled, would be nice.

Greets,

Sven

Report message to a moderator