Keeps logging users out

[axew3]

Perfect

[ave]

Hm... Seems better now, at least is not logging me out after a minute or two... It logged me out on mobile, but I cleared cache and tried again, now it seems fine.

I don't want to jinx it, but it seems to be working. But where is the logic? Login key expiration was set to 365 days...

[ave]

Nope...
Something weird I just noticed - when I login on PhpBB side - three phpbb cookies have check sign in "HTTP" column in inspector. And when I login via Wordpress - there is no check sign in that "HTTP" column.

So far, it hasn't logged me out. And I logged in on /wp-admin, not on phpbb side...

[ave]

Ha! Sorry for consecutive posts, but I have news. Maybe it's relevant.
So, I went out for half an hour and when I came back - I refreshed WP index, cookies were there, and they didn't have ✓ sign in HTTP column in inspector. That's because I logged in through WP side a while ago. But, when I clicked on forum topic, _k cookie was empty, but I noticed that ✓ sign appeared in all three phpBB cookies. Is it fair to assume that cookie HTTP header is causing the problem? Is that something with your script or pure phpBB problem?

[axew3]

so try open:
/wp-content/plugins/wp-w3all-phpbb-integration/class.wp.w3all-phpbb.php

serach for this, inside private static function phpBB_user_session_set($wp_user_data){

Code: Select all

	    setcookie ("$k", "$key_id_k", $cookie_expire, "/", $w3cookie_domain, $secure);
 	    setcookie ("$sid", "$w3session_id", $cookie_expire, "/", $w3cookie_domain, $secure); 
 	    setcookie ("$u", "$phpbb_user_id", $cookie_expire, "/", $w3cookie_domain, $secure);

change into:

Code: Select all

	    setcookie ("$k", "$key_id_k", $cookie_expire, "/", $w3cookie_domain, $secure, true);
 	    setcookie ("$sid", "$w3session_id", $cookie_expire, "/", $w3cookie_domain, $secure, true); 
 	    setcookie ("$u", "$phpbb_user_id", $cookie_expire, "/", $w3cookie_domain, $secure, true);  

that's to setup the cookie as http only.
CLean cookies and try out.
But i do not think this is your problem. Yiu should have wrong settings somewhere.

[axew3]

sure that when you click on a last topic, you still are https if logged in as https and not http?
Think i reproduced the issue.
It seem to me that the switch to between http/s happen when i click into last topics widget to open a listed forum post.
It not happen in iframe, but happen in your mode.
Maybe i'm wrong, but i'm looking into this right now.
Can you do this please:
login wp side, then click on a last forum post. You phpbb will open, and you result logged out.
But your address say http now, not https?
if you switch to https the forum address into address bar, then you reappear logged in?
Can be this? Isn't it?