1.9.9 to 2.0 patches logs and bugs report

Post a reply


This question is a means of preventing automated form submissions by spambots.
Smilies
:D :) ;) :( :o :shock: :? 8-) :lol: :x :P :oops: :cry: :evil: :twisted: :roll: :!: :?: :idea: :arrow: :| :mrgreen: :geek: :ugeek:

BBCode is ON
[img] is ON
[url] is ON
Smilies are ON

Topic review
   

If you wish to attach one or more files enter the details below.

Maximum filesize per attachment: 1 MiB.

Expand view Topic review: 1.9.9 to 2.0 patches logs and bugs report

Re: 1.9.9 to 2.0 patches logs and bugs report

by axew3 » Sun Dec 08, 2019 12:03 am

at date of this post:
Patch wp_w3all.php and class.wp.w3all-phpbb.php
for correct sessions setup when login done in phpBB without remember me
and ONE MORE IMPORTANT fix

Please download and replace both patched wp_w3all.php and class.wp.w3all-phpbb.php files:

wp_w3all.php:
https://plugins.trac.wordpress.org/expo ... _w3all.php

class.wp.w3all-phpbb.php
https://plugins.trac.wordpress.org/expo ... -phpbb.php

and substitute/replace both files into folder:
/wp-content/plugins/wp-w3all-phpbb-integration/

Re: 1.9.9 to 2.0 patches logs and bugs report

by axew3 » Thu Dec 05, 2019 8:23 pm

Ok! It result to be all fixed at moment!
Do the above (replace both files) or uninstall and reinstall plugin if you can't upload via ftp.

Please report if still any problem

Re: 1.9.9 to 2.0 patches logs and bugs report

by axew3 » Thu Dec 05, 2019 4:32 pm

In the hope that all has been fixed, after some little test more may the new 2.0.0 version will be released.

My hope was to increase security by adding a double check into main query, but it after, depending on phpBB ACP session settings, may result inconsistent.

So, at date of this post, 1.9.9 has been patched again and you should download now both wp_w3all.php and class.wp.w3all-phpbb.php files
to resolve the remember me issue (and also for the not remember me login)

wp_w3all.php:
https://plugins.trac.wordpress.org/expo ... _w3all.php

class.wp.w3all-phpbb.php
https://plugins.trac.wordpress.org/expo ... -phpbb.php

and substitute/replace both files into folder:
/wp-content/plugins/wp-w3all-phpbb-integration/

sorry guys, it has been an hard work to understand why the code was failing, and rebuild sessions logic, i just hope that all has been considered this time and will be no further more surprise (logged out next time i will return back online later!)

Re: 1.9.9 to 2.0 patches logs and bugs report

by axew3 » Thu Dec 05, 2019 12:23 am

At date of this post:

i've been around to check some time now, and after fixed several old sessions problems,
the new code do the follow:

fix an old bug, that was setting the expiration time of phpBB cookie wrong in some circumstances
correctly remove sessions on logout
avoid duplicated sessions setup onlogin
increase security checking for session_k and sid at same time for remember me logins

Actually, if login done in wordpress side, the wordpress cookie will be released as long time cookie, valid for one year.
If login done into phpBB, then the cookie will be released by phpBB (and will not be overwrite by plugin code) with value you have setup into
ACP -> Security settings -> "Remember Me" login key expiration length (in days):

finally all should work fine

To apply all the above,
download and replace both patched wp_w3all.php and class.wp.w3all-phpbb.php files:

wp_w3all.php:
https://plugins.trac.wordpress.org/expo ... _w3all.php

class.wp.w3all-phpbb.php
https://plugins.trac.wordpress.org/expo ... -phpbb.php

and substitute/replace both files into folder:
/wp-content/plugins/wp-w3all-phpbb-integration/

Re: 1.9.9 to 2.0 patches logs and bugs report

by axew3 » Wed Dec 04, 2019 7:12 pm

at date of this post:
Patch wp_w3all.php and class.wp.w3all-phpbb.php
for correct remember me sessions setup


Please download and replace both patched wp_w3all.php and class.wp.w3all-phpbb.php files:

wp_w3all.php:
https://plugins.trac.wordpress.org/expo ... _w3all.php

class.wp.w3all-phpbb.php
https://plugins.trac.wordpress.org/expo ... -phpbb.php

and substitute/replace both files into folder:
/wp-content/plugins/wp-w3all-phpbb-integration/

Re: 1.9.9 to 2.0 patches logs and bugs report

by axew3 » Wed Dec 04, 2019 4:43 pm

Tested and fixed all over three different hooks and functions.
All the session db/cookie logic have been rewrite to fix some aspect, so after some little test more, a new important patch will be released to fix definitively this aspect.

Top