Topic: Logout Problem

http://openwings.co.cc/login.php?action=out&id=2

I have noticed and the two other members have noticed that we can't logout.  We can only log out by clearing private data (cookies etc.)

[img]http://img90.imageshack.us/img90/746/scripter8ko.png[/img]
http://openwings.co.cc

Re: Logout Problem

If you're using 1.2.17, that's because the new logout link doesn't look like that: it has a CSRF token appended to it.

Re: Logout Problem

what am I suppose to do to fix the problem then? Yes I'm running 1.2.17.

[img]http://img90.imageshack.us/img90/746/scripter8ko.png[/img]
http://openwings.co.cc

Re: Logout Problem

Apply the 1.2.17 changes/hdiff properly so that your logout link has the csrf_token?

5

Re: Logout Problem

Actually PunBB 1.2.17 was released with a broken Logout link. I dled from the official site and got this problem.

Correct link in include/functions.php should look like:

<a href="login.php?action=out&id='.$pun_user['id'].'&csrf_token='.sha1($pun_user['id'].sha1(get_remote_address())).'">'.$lang_common['Logout'].'</a>

Re: Logout Problem

Mmm, no, the logout link works fine. That's proven by this site, which uses an unmodified version of 1.2.17. There was, however, an issue with forums that didn't support sha1, so we switched to using pun_hash.

Re: Logout Problem

Yes but this is a FRESH install of punbb 1.2.17 not an upgrade....

[img]http://img90.imageshack.us/img90/746/scripter8ko.png[/img]
http://openwings.co.cc

Re: Logout Problem

That's actually physically impossible.
Try uploading a copy of include/functions.php from a new download of PunBB from the site.

9 (edited by Scripter 2008-04-29 14:07)

Re: Logout Problem

I fixed it.

[img]http://img90.imageshack.us/img90/746/scripter8ko.png[/img]
http://openwings.co.cc

Re: Logout Problem

so your logout link looks like this:
login.php?action=out&id=2&csrf_token=b2593ce435b2038f1420f5555e108cec586abdf0

11

Re: Logout Problem

I also installed the Private Messaging mod. I suppose the logout link might have been overwritten then. Unfortunately the computer where I have stored the PunBB distribution archive is currently offline, so I can't verify.

Re: Logout Problem

That's probably correct

Re: Logout Problem

j7n wrote:

I also installed the Private Messaging mod. I suppose the logout link might have been overwritten then. Unfortunately the computer where I have stored the PunBB distribution archive is currently offline, so I can't verify.

It is the private messaging mod.

[img]http://img90.imageshack.us/img90/746/scripter8ko.png[/img]
http://openwings.co.cc