Customizing SMF > Joomla Bridge Support

Session Verification failures after specific post actions

<< < (2/3) > >>

koops:

--- Quote from: Orstio on May 25, 2010, 06:21:29 PM ---Do you have the SMF_Header_include mambot published?

--- End quote ---

I just double checked that and yes I do.

Also tried turning it off to see what it would do. No Change.

koops:
I've also just noticed that all new "unread" posts which first show up after clicking "Show unread posts since last visit." is cleared out after reading just ONE of the threads it finds!!!

This is a significant pain in the behind now :(

Orstio:
Do you have a URL?

koops:
http://www.ozforces.net [nofollow]

i have changed the forum link on the top menu to goto the unwrapped site.

To see the error you'll have to follow the joomla style url

ie. xxxxxxxxxxxxxxxxxxxxxxx

Orstio:
Yep.  Your problem is the obsolete bridge.  Bridge 1.1.7 would work.

After bridge 1.1.6, SMF fixed a session-fixation issue.  That fix changes the session id on certain post events to prevent script-kiddies from being able to run scripts to automate guessing of the session id (makes it a moving target).  Bridge 1.1.6 did not consider that, bridge 1.1.7 did.

Due to the GPL issues, you're now SOL.

Navigation

[0] Message Index

[#] Next page

[*] Previous page