Coming phpBB WordPress 2.6.5 logs

User avatar
axew3
w3all User
w3all User
Posts: 2689
Joined: Fri Jan 22, 2016 5:15 pm
Location: Italy
Contact:

Coming phpBB WordPress 2.6.5 logs

Post by axew3 »

The integration plugin is on the way to be updated, follows logs of improvements and changes:

1) Optimize the brute block flow: avoid the account lock when an user is effectively logged in due to legit action in phpBB, but the presented session changed (see fix 3 below)

If any suggestion please just reply.
Cheers!
User avatar
axew3
w3all User
w3all User
Posts: 2689
Joined: Fri Jan 22, 2016 5:15 pm
Location: Italy
Contact:

Re: Coming phpBB WordPress 2.6.5 logs

Post by axew3 »

2) phpBB online users and stats function updated to show correct number of online users, discarding session_IPs from same IP. The result is still not completely correct, when more users are connected via same IP: anyway since it is a rare case, the light code to obtain the result is substantially +- as it was and is not complete.
User avatar
axew3
w3all User
w3all User
Posts: 2689
Joined: Fri Jan 22, 2016 5:15 pm
Location: Italy
Contact:

Re: Coming phpBB WordPress 2.6.5 logs

Post by axew3 »

The third improvement, easily switchable to the old way, is quite well self explained into the file class.wp.w3all-phpbb.php
// may phpBB session expired while the WP user is still logged in
// keep the user logged in resetting the user's phpBB session

3)

Code: Select all

   // may phpBB session expired while the WP user is still logged in
   // keep the user logged in resetting the user's phpBB session
   // remove -> $noBFF = true; on next and -> !isset($noBFF) on following two instructions 
   // to let fire self::w3all_wp_logout(); instead, so to logout the logged WP user when no valid phpBB session found
   
    if ( empty($phpbb_user_session) && $phpbb_u > 2 && is_user_logged_in() ) {
    	  self::phpBB_user_session_set($current_user);
    	  $noBFF = true;
    	 }
User avatar
axew3
w3all User
w3all User
Posts: 2689
Joined: Fri Jan 22, 2016 5:15 pm
Location: Italy
Contact:

Re: Coming phpBB WordPress 2.6.5 logs

Post by axew3 »

The phpBB integration extension (not the WP plugin) will be updated soon to clean up the wordpress brute force record for the user that login in phpBB. This will resolve the problem that is the one explained on the anti bruteforce explain: when user come in WordPress as logged in phpBB, and the id result to be on the bruteforce list, even if the user correctly logged in phpBB, is redirected to login in WP.
User avatar
axew3
w3all User
w3all User
Posts: 2689
Joined: Fri Jan 22, 2016 5:15 pm
Location: Italy
Contact:

Re: Coming phpBB WordPress 2.6.5 logs

Post by axew3 »

2.6.5 has been released. Enjoy!
Post Reply