Your name - IN GOLD!

That's the point I was trying to make above.

The login cookie for the forums is only good for the forums -- it can't be used to access my CoH account or my NCSoft master account. It's a hash created by vBulletin and does not contain your password. The rest of the NCSoft Empire doesn't recognize it as a valid login.

By not maintaining the session, they're forcing me to constantly re-enter my game account password, putting it at risk of being captured by malware or a man-in-the-middle attack. That password can potentially be used to gain access to my billing info.

The only way staying logged in is a risk is if they create some addon for the forums to let you manage your account through it, which I don't see happening for a variety of reasons.

Most of which end with "...and the Seattle web team doesn't want to maintain it."

Originally Posted by Dispari I don't know why Dink thinks she's not as sexy as Jay was. In 5 posts she's already upstaged his entire career.

Thank You Zwill!!

We may give you a buncha crap, but we love you too

No problems then, don't care about the color but my forum title is way more important to me than it should be.

Lets straighten out some terminology. The forums send information to the browsers which are stored as a cookie. This is state information in the browser at the user's computer. That cookie has a number of fields, and I know they've been messing with them because certain things have changed over time. Two fields in that cookie correspond to the Remember Me checkbox which tells the browser to remember the user name and password of the user so the user shouldn't have to log in again, as in ever. Those fields are bbuserid and bbpassword. bbuserid contains the vbb user id number of the user, *not* the user's login name. That information is only meaningful to the forum software. bbpassword contains a hash of the user password and its used in place of the user's password so the browser doesn't store the user's password in a form that can be read.

These fields are set to expire in one year's time. All the other fields in the cookie are set to expire on session termination which is another way of saying "when you close the browser."


None of this has anything to do with vbb forum state tracking which happens on the server side. Its something server-side that is what's going kaboom, probably in session handling. Expire that every eight hours, every eight minutes, who cares. It exists in a session table in the forum database, and you should periodically expire that so it doesn't clutter up with a ton of sessions that might never resume - i.e. people logging in from different IP addresses or different computers just once. But, and I feel like I'm talking to myself here, expiring the session is not supposed to kill your client-side cookies. The boards are not "expiring" the client side cookies, the boards are sending cookie deletes to the client to purge the cookies. Including bbuserid and bbpassword, which is what is being stored to keep track of "Remember Me."

And this should never happen. Not every eight hours, not every eight years. Never.

So to everyone using Hero Skin, you'll be "The Man With No Name"? You'll need to get an Eastwood avatar...

This.

I'm the exact same way. When I'm at home I never have any temp files and when I'm on my comp at work I log out when I'm not reading/posting and clean out my files every time I finish a session. It doesn't take long to log back in when you want to post and I don't see any reason to stay logged in so 8 hours is more than enough. The only thing I want to see is the log out bug fixed so I won't lose posts I have typed up when I hit submit reply.

Thank you!

I assure you, I will do a happy dance and ditch the voodoo dolls when it's fixed.

Originally Posted by Dispari I don't know why Dink thinks she's not as sexy as Jay was. In 5 posts she's already upstaged his entire career.

I'm sorry, you're not Lineage II.

Hey, I love my authenticator. They can get my game pass and login all they want, but without my keyfob, they can't do a thing to my account.

Glad to hear things are being worked on though.

I don't get it. What does the color displayed have to do with forum permissions. Is there some little guy that slides open a speakeasy-type window in the internets and checks to see if the incoming packets are gold colored? Why in god's name would the displayed color of a name have any impact on forum permissions at all?

It may not be a technical reason. They might want to be able to tell at a glance who has full access to the forums and who doesn't. For example, let's say they give free players access to all forums in the "For Fun" section. Then a premium player makes a post in General asking for build advice. The mods move the thread to Build Workshop and now the OP no longer has the ability to post in the thread.

I'm not saying that's the reason, just that there is the possibility that there are reasons not having to do with software.

EDIT: Although it seems not to have happened completely. As I'm still in white.

So your 11 year old can create a forum setup that interfaces w/ a international store and a game? interesting...

on another note, I personally don't care for the gold forum name =\

Yeah, he could. He's also an admin for fairly well known Minecraft server and 3 Kyu's short of his first Dan in karate.

That's a great question.

We plan on allowing Free/Premium a bit more access to the forums than they currently have, and it's extremely helpful (for many reasons) to be able to distinguish a VIP player from a Free/Premium player at a glance.

I was really hoping that was going to be the answer. Sweet.