Show all posts by user
If you are having a problem with Phorum, this is the place to look for an answer. You can also find help on our Discord.
Re: Module: Spam Hurdles 2, release candidate - testers welcome - 7 years ago
I posted a fix to make Spam Hurdles work with the latest version of reCAPTCHA here:by Xiphias - v5/v6 Modules/Add-Ons
Re: ReCaPTCHA not working - 7 years ago
Hello everyone. I was able to get recaptcha 2 working on my site. Just replace forum/mods/spamhurdles/captcha/class.captcha_recaptcha.php with the file I've attached. I've only tested it on my site so I can't promise it will work everywhere. You will still need to set up your captcha private/public keys as before (follow the instructions in the Spam Hurldes mod settingby Xiphias - Phorum Support
Re: Accounts scrambled - users logged in as each other - 8 years ago
So, ajax.php was the only thing doing any cache-control (which it was setting to must-revalidate). ajax.php also doesn't send a set-cookie. Everything else, including list.php, read.php, and javascript.php, have no cache-control settings. Apparently the default behavior is to treat no cache-control as meaning "cache this however you want." So I suspect that my hosting company adby Xiphias - Phorum Support
Re: Accounts scrambled - users logged in as each other - 8 years ago
Does the phorum code set the cache-control in the headers anywhere by default? Or is this solely on the Apache configuration? I am starting to suspect that the "cache-control: max-age=0" in the header is causing a CDN or edge cache in my hosting service to improperly cache sessions and send them to the wrong users.by Xiphias - Phorum Support
Re: Accounts scrambled - users logged in as each other - 8 years ago
There's some promising leads in articles like these: [1fix.io] But they're very WordPress-specific (in fact, google "PHP cookie caching" and you will be overwhelmed with WordPress.) Here's what I think might be happening? User A logs in Server caches User A's versions of all the pages User B loads the page Server sends out User A's instances, whichby Xiphias - Phorum Support
Re: Accounts scrambled - users logged in as each other - 8 years ago
I'm a little confused here - we're running a linux apache server, with no ASP. Are you thinking there's a similar cache issue at play here? I've been going through the phorum source looking for clues, and haven't seen any. So I think you're probably on to something. Maybe there's some apache output caching going on here?by Xiphias - Phorum Support
Re: ReCaPTCHA not working - 8 years ago
I started to take a look at doing this on my site but got distracted by other issues.by Xiphias - Phorum Support
Re: Accounts scrambled - users logged in as each other - 8 years ago
The issue stopped with cookies disabled - although that presented another issue since the session ID winds up in the site URL and our users frequently link to other posts. I re-enabled cookies (after again, clearing everyone's sessions in the users table) and I thought the issue was finally resolved... but it started happening again. There doesn't seem to be much in common - it�by Xiphias - Phorum Support
Re: Accounts scrambled - users logged in as each other - 8 years ago
My thinking went in the same direction - I noticed they had a file server go down the same day I started seeing this issue. I contacted them and they denied that the file server could have caused the issue.by Xiphias - Phorum Support
Re: Accounts scrambled - users logged in as each other - 8 years ago
Ok, one more update - I had some users do some debugging for me, and when they get logged in as the wrong user, they do in fact have the other user's session IDs in their local cookies. So what would cause that? the cookie uses the format : so something is causing phorum to write the wrong cookies to users. After looking at the user API I am not seeing how this could be the case.by Xiphias - Phorum Support
Re: Accounts scrambled - users logged in as each other - 8 years ago
Ok, I deleted the accounts manually and cleared sesid_lt and sessid_st. This seemed to work, but so far at least one user wound up logged in as another user. I checked the users table - User A logged in after I took the forum down and cleared the cache and the table. User B came to the forum and was already erroneously logged in as User A - the entry for User B still shows black sessid_lt andby Xiphias - Phorum Support
Re: Accounts scrambled - users logged in as each other - 8 years ago
Thanks for the fast response! I have a couple of questions: 1) I've tried purging the cache quite a few times and it keeps timing out (at least, I assume it's a timeout - I get a 500 error with the associated log "End of script output before headers: admin.php"). Can I do this manually by clearing the tmp directory on the server? 2) I was able to backup my database anby Xiphias - Phorum Support
Accounts scrambled - users logged in as each other - 8 years ago
I am not sure what's happening but a bunch of people (myself included) on my phorum were suddenly logged in as other people. There doesn't seem to be any rhyme or reason to it - I (user_id 35) was signed into another account (user_id 4) a user_id 20 became user_id 1658, etc. I don't know enough about how login credentials are cached to figure this one out. I am not sure if thisby Xiphias - Phorum Support
Getting message_id via javascript? - 13 years ago
I am making an AJAX call to a module I'm working on, but the PHP function that responds to the ajax call needs to know the current message id. Is there an easy way to pass this to the php function? I tried using $PHORUM within the AJAX hook function but it doesn't appear to work that way. function phorum_mod_mymod_ajax_function() { global $PHORUM; if (isset($PHORUMby Xiphias - Phorum Support