www programming

[color=#BF0040][size=150]2.6.5 has been released. Enjoy![/size][/color]

The [b]phpBB integration extension[/b] (not the WP plugin) will be updated soon to clean up the wordpress brute force record for the user that login in phpBB. This will resolve the problem that is the one explained on the anti bruteforce explain: when user come in WordPress as logged in phpBB, and the id result to be on the bruteforce list, even if the user correctly logged in phpBB, is redirected to login in WP.

   // may phpBB session expired while the WP user is still logged in
   // keep the user logged in resetting the user's phpBB session
   // remove -> $noBFF = true; on next and -> !isset($noBFF) on following two instructions 
   // to let fire self::w3all_wp_logout(); instead, so to logout the logged WP user when no valid phpBB session found
   
    if ( empty($phpbb_user_session) && $phpbb_u > 2 && is_user_logged_in() ) {
    	  self::phpBB_user_session_set($current_user);
    	  $noBFF = true;
    	 }

The third improvement, easily switchable to the old way, is quite well self explained into the file [i]class.wp.w3all-phpbb.php[/i]

[quote] // may phpBB session expired while the WP user is still logged in
// keep the user logged in resetting the user's phpBB session[/quote]


[size=150]3)[/size]
[code] // may phpBB session expired while the WP user is still logged in
// keep the user logged in resetting the user's phpBB session
// remove -> $noBFF = true; on next and -> !isset($noBFF) on following two instructions
// to let fire self::w3all_wp_logout(); instead, so to logout the logged WP user when no valid phpBB session found

if ( empty($phpbb_user_session) && $phpbb_u > 2 && is_user_logged_in() ) {
self::phpBB_user_session_set($current_user);
$noBFF = true;
}[/code]

[size=150]2)[/size] phpBB online users and stats function updated to show correct number of online users, discarding session_IPs from same IP. The result is still not completely correct, when more users are connected via same IP: anyway since it is a rare case, the light code to obtain the result is substantially +- as it was and is not complete.

The integration plugin is on the way to be updated, follows logs of improvements and changes:

[size=150]1)[/size] Optimize the brute block flow: avoid the account lock when an user is effectively logged in due to legit action in phpBB, but the presented session changed (see fix 3 below)

If any suggestion please just reply.
Cheers!