Topic: Logout Problem
http://openwings.co.cc/login.php?action=out&id=2
I have noticed and the two other members have noticed that we can't logout. We can only log out by clearing private data (cookies etc.)
http://openwings.co.cc
You are not logged in. Please login or register.
PunBB Forums → PunBB 1.2 troubleshooting → Logout Problem
http://openwings.co.cc/login.php?action=out&id=2
I have noticed and the two other members have noticed that we can't logout. We can only log out by clearing private data (cookies etc.)
If you're using 1.2.17, that's because the new logout link doesn't look like that: it has a CSRF token appended to it.
what am I suppose to do to fix the problem then? Yes I'm running 1.2.17.
Apply the 1.2.17 changes/hdiff properly so that your logout link has the csrf_token?
Actually PunBB 1.2.17 was released with a broken Logout link. I dled from the official site and got this problem.
Correct link in include/functions.php should look like:
<a href="login.php?action=out&id='.$pun_user['id'].'&csrf_token='.sha1($pun_user['id'].sha1(get_remote_address())).'">'.$lang_common['Logout'].'</a>
Mmm, no, the logout link works fine. That's proven by this site, which uses an unmodified version of 1.2.17. There was, however, an issue with forums that didn't support sha1, so we switched to using pun_hash.
Yes but this is a FRESH install of punbb 1.2.17 not an upgrade....
That's actually physically impossible.
Try uploading a copy of include/functions.php from a new download of PunBB from the site.
I fixed it.
so your logout link looks like this:
login.php?action=out&id=2&csrf_token=b2593ce435b2038f1420f5555e108cec586abdf0
I also installed the Private Messaging mod. I suppose the logout link might have been overwritten then. Unfortunately the computer where I have stored the PunBB distribution archive is currently offline, so I can't verify.
That's probably correct
I also installed the Private Messaging mod. I suppose the logout link might have been overwritten then. Unfortunately the computer where I have stored the PunBB distribution archive is currently offline, so I can't verify.
It is the private messaging mod.
PunBB Forums → PunBB 1.2 troubleshooting → Logout Problem
Powered by PunBB, supported by Informer Technologies, Inc.