UBB.threads PHP Forum Software Community Forums UBB.threads 7 Bug Reports Fixed Bugs [FIXED for 7.1] Search logs user out

I have had a report that whenever a particular logged in user clicks "search", the system logs them out and then tells them "you must be logged in" to search.

I only have this report from this one person, but I know this particular user and can't imagine he is doing something really stupid to get this to happen.

Can anyone help?

It'll sound dumb, are they accessing your site through:
http://yoursite.tld

or
http://www.yoursite.tld

I ask because I think the search forum sends the search to the www version of your site and they may not be logged into the www version (as the "www" on your domain is meerely a subdomain the cookie would be set on whatever url they logged in on).

Ah. Interesting. That sounds a bit weird, and it'd be really nice if this could somehow be corrected; but I will ask the user. I would guess that's the problem!

Thanks for the reply. :-)

It can be corrected, set your .htaccess file up to forward users accessing yoru site without "www" to "www" so all users access your forums the same way.

It is intended behavior however that it not function this way, as it's a security issue with cookies (as cookies should not spread over differant domain names, otherwise you could see even more issues).

I'll post something later on about how to configure apache to forward url requests to another url, probably in the chitchat forum or something.

Hmm, but I thought www was supposed to be "phased out" slowly down the line...? I forget where I read that a while back. Why can't Search perform in the same domain as the user current is using? Because I have links to both www and not out there. However, I notice that when logging in to my site without the www, upon logging in it gets switched to www anyway...

I've never heard of "www being phaised out" before; it's a subdomain and i've never heard of a server not supporitng it...

Also, its not the search that logs people out, its that the search uses the hardcoded domain as specified in the configuration file (as far as i can tell by pure speculation; so where user is logged into yoursite.tld theh search uses www.yoursite.tld where the user has not logged into...

The problem is most people think that www is part of the domain name. As Gizmoi says it is just a sub-domain - personally I think it is one of the big mistakes of the internet and should never have been included.

Why? Because if you have a genuine sub-domain of say http://news.bbc.co.uk people will try to put www. before it, simply because 'all websites have to have it - don't they?'

Maybe a better option is to redirect all www.domain.tld requests to domain.tld.

'eh to each their own on what they *want* to work; just saying it's common of why things *don't* work ...

And yeh, when I tell my mom "it's stats.yourdomainname" she responds "I'm at www.stats.mydomainname and its not working" :/

Ok, the main issue is there were a few FULL_URL references laying around in some of the scripts/templates. I've gone through everything and changed them all to BASE_URL. So, if you're on http://domain.com you'll stay on http://domain.com and not get redirected to http://www.domain.com (unless you have an actual redirect in place that is )