HB wrote:The three cookies are fine, but the hbforums_sid is the only one that matters for logouts. If you're getting multiple SIDs, then your IP address is changing. Some ISPs dynamically allocate a pool of IP addresses to a large community, i.e., one IP address could be "reused" by 50 people within the span of a few minutes (AOL is well known for this proxy approach). Forums that use IP addresses to recognize return visitors have troubles with such ISPs; when it checks your returned session ID and it doesn't match the recorded IP address, it creates a new session (otherwise someone could potentially "spoof" your ID if you happen to send the full URL with SID to them in a chat, e-mail, etc.).
To test this theory, I've reduced the precision of the check to a larger block of IP addresses, which should encompass your ISP's full allocation. The drawback of this reduction is one of your fellow ISP subscribers could spoof your login, if they managed to acquire a valid session ID (yes, a remote chance but not zero).
Return to News and Suggestion Box