Unconfigured Ad Widget

Collapse

log in problem

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • condor
    Senior Member
    • Apr 2009
    • 1102

    log in problem

    When I log on this board I check the 'remember me' box, but when I come back I need to log in again. The remember me function isn't working??? Anyone else having this problem?? This can occur when I've cleaned out my catch, but it's not the case this time. All others work fine...
    WITHOUT THE 2nd THERE WON'T BE A 1st...]
  • #2
    the86d
    Calguns Addict
    • Jul 2011
    • 9587

    Browser and OS?

    (It's cache... )

    Comment

    • #3
      condor
      Senior Member
      • Apr 2009
      • 1102

      Originally posted by the86d
      Browser and OS?

      (It's cache... )
      Windows 7 and Chrome...
      WITHOUT THE 2nd THERE WON'T BE A 1st...]

      Comment

      • #4
        theLBC
        CGN/CGSSA Contributor
        CGN Contributor
        • Oct 2017
        • 7089

        use https, or you might be able to set some exception.
        there is no valid SSL cert on the site, but it may allow your browser to keep you logged in...

        Comment

        • #5
          condor
          Senior Member
          • Apr 2009
          • 1102

          I'll take a look see, however I never had a problem until about a week ago.
          WITHOUT THE 2nd THERE WON'T BE A 1st...]

          Comment

          • #6
            texas_law_dog
            Senior Member
            • Jun 2012
            • 734

            Check this thread:

            Comment

            • #7
              the86d
              Calguns Addict
              • Jul 2011
              • 9587

              Sorry I can't help. I stopped using Chrome for anything I login to when some NSFW links auto-synced with my work rig's Chrome, after just a web-based Gmail login, and as I recall, it kept the account tied-in after logging out of Gmail.
              That's about when I started caring...

              Comment

              • #8
                Fizz
                Senior Member
                • Feb 2012
                • 1473

                The problem is that HTTPS enforcement on this site is broken and it affects the way cookies/sessions are handled.

                So, what probably happened is you logged into https://www.calguns.net and eventually you'll end up back at the unencrypted site and the cookie doesn't persist.

                To fix this:

                Delete all of your old cache and cookies (totally, or only related to Calguns).

                Remove all entries in your history that pertain to Calguns so they are never offered as a suggestion in the address bar.

                Log back into Calguns using the http:// (no "s") version of the site.

                Your login should then persist if you check the remember box.
                Last edited by Fizz; 08-07-2018, 5:34 AM.

                Comment

                • #9
                  Fizz
                  Senior Member
                  • Feb 2012
                  • 1473

                  Originally posted by theLBC
                  use https, or you might be able to set some exception.
                  there is no valid SSL cert on the site, but it may allow your browser to keep you logged in...
                  The site has a valid cert, Apache isn't configured properly for URL rewrites and https enforcement.

                  It's been a problem for years and the admins either know and don't care, or don't know.

                  The problem is that things like PMs and login hashes are sent in plaintext. So, any private details in PMs can be read by someone in the communication path. It also lends itself to session jacking.

                  The content of forums/etc. Are already public so posts aren't a huge concern, but cookies, PMs and password hashes are the real vulnerability.

                  Comment

                  • #10
                    condor
                    Senior Member
                    • Apr 2009
                    • 1102

                    Thanks for the info Fizz. I'll get on it as soon as they cut me loose from the hospital this afternoon or tomorrow??
                    WITHOUT THE 2nd THERE WON'T BE A 1st...]

                    Comment

                    Working...
                    UA-8071174-1