Search options

yea, it is.  I was also playing with some different code which I grabbed from the actual login.php page, which I stripped out the things I didn't think were needed:

        $resultforum = mysql_query("SELECT * FROM lpforum_users WHERE username = '$myusername'");
        $rowforum = mysql_fetch_array($resultforum);
       
        define('PUN_ROOT', './members/forum/');
        include("./members/forum/config.php");
        include("./members/forum/include/common.php");
               
        $user_id=$rowforum['id'];
        $db_password_hash = $rowforum['password'];

        $sha1_in_db = (strlen($db_password_hash) == 40) ? true : false;
        $sha1_available = (function_exists('sha1') || function_exists('mhash')) ? true : false;

        $form_password_hash = pun_hash($form_password);    // This could result in either an SHA-1 or an MD5 hash (depends on $sha1_available)

        if ($sha1_in_db && $sha1_available && $db_password_hash == $form_password_hash)
            $authorized = true;
        else if (!$sha1_in_db && $db_password_hash == md5($form_password))
        {
            $authorized = true;

            if ($sha1_available)    // There's an MD5 hash in the database, but SHA1 hashing is available, so we update the DB
                $db->query('UPDATE '.$db->prefix.'users SET password=\''.$form_password_hash.'\' WHERE id='.$user_id) or error('Unable to update user password', __FILE__, __LINE__, $db->error());
        }

    //if (!$authorized)
        //message($lang_login['Wrong user/pass'].' <a href="login.php?action=forget">'.$lang_login['Forgotten pass'].'</a>');

    // Update the status if this is the first time the user logged in
    if ($group_id == PUN_UNVERIFIED)
        $db->query('UPDATE '.$db->prefix.'users SET group_id='.$pun_config['o_default_user_group'].' WHERE id='.$user_id) or error('Unable to update user status', __FILE__, __LINE__, $db->error());

    // Remove this users guest entry from the online list
    $db->query('DELETE FROM '.$db->prefix.'online WHERE ident=\''.$db->escape(get_remote_address()).'\'') or error('Unable to delete from online list', __FILE__, __LINE__, $db->error());

    $expire = ($save_pass == '1') ? time() + 31536000 : 0;
    pun_setcookie($user_id, $form_password_hash, $expire);

It's from here that I am getting the above referenced results.  The cookie_seed is pulling right from the config so I would think it would be the same.  Curiously though, I wonder if the cookie is not transferring when I go into the forums as I do not see anything in the print_r ($_COOKIE) I have in there when I go there from the external page.  That info is:

$cookie_name = 'punbb_cookie';
$cookie_domain = '';
$cookie_path = '/';
$cookie_secure = 0;

Sure - the login for this is here: http://leaseperfect.com/login.php  and the forum is located: http://leaseperfect.com/members/forum

What happens is when someone registers, I have it also setting up the forum user behind the scenes which works fine.  Then when logging in, it set's the session info for the member and hopefully the cookies as well.

Here is a test login and password if that helps:

Username: testing
Password: testing

That works for both the members section and the forum...tested separately.

My end goal is once someone logins...they can just click on the 'LP Forums' link on the right and access the forums without logging in again.