Cookie invalidated when accessed from another pc [FIXED]

DonGato · Post by **DonGato** » Thu Aug 26, 2004 10:38 pm

I use anidb at home and work but the first time I log in each of the computers each day the setting to remember my user is lost. This started to happen since last changes and is a REAL nuisance. Can we have it fixed?

Post by **exp** » Fri Aug 27, 2004 7:46 am

actually this is not a bug but a feature.

if you really want to use the remember login feature on multiple computers, check this thread for a workaround:
http://www.anidb.net/forum/viewtopic.php?t=2316

BYe!
EXP

DonGato · Post by **DonGato** » Fri Aug 27, 2004 10:27 am

Not a nice workaround... can we know why this feature?
If people are so paranoid to not keep a cookie in multiple computers they just don't need to click the option to remember it!

I also use multiple browsers and not always use a Bookmark/Favorite and access by typing anidb.ath.cx and this you recommend won't work.

Stupid change IMO.

wahaha · Post by **wahaha** » Fri Aug 27, 2004 11:14 am

The auto-login with xkeepoldcookie has to be done "only" once (when the auto-login-cookie is set) for each browser and computer you login from, so there's no need for a bookmark.

Anyway, I have to admit that I'd also prefer being able to get rid of that function, maybe like this:

Make "Allow multiple auto-logins" a profile-option, defaulting to false.
When an invalid auto-login-cookie is sent, the error-page should not just reject it, but also show a short explanation where and how to allow multiple valid auto-login cookies.

Post by **exp** » Fri Aug 27, 2004 11:14 am

you only need to do that once on each computer/browser @ workaround.
no need for a bookmark.
so that shouldn't be such a problem.

the main reason for this feature is the added security for stupid users. bc the remember password function should only be used on ones personal pc if noone else has access to it.
the current solution more or less enfoces the use of the remember option on only one pc. and even if it is used on another pc the login will only be remembered as long as the user does not login with the remember option somewhere else.

also note that logging in on a different pc/browser without using the remember login option will not invalidate your autologin cookie on the other pc/browser.

BYe!
EXP

DonGato · Post by **DonGato** » Fri Aug 27, 2004 12:10 pm

Well, for me AniDB is not a bank account so these nuisances are really not needed. Some people is really paranoid/stupid, so we have to do extra work for them. Do this people benefit AniDB in a good way? I mean, they contribute a lot or they are mere "users"?

I would bear such request from users like DerIdiot, wahaha, nwa or others but nor from the average john doe. They can rot in hell if it were only for me.

Yes, I'm pissed...

Skywalka · Post by **Skywalka** » Sun Aug 29, 2004 1:55 pm

use opera. use the password wand tool. stop complaining like a little baby.

[removed mutual flaming that followed after these posts -- wahaha]

kidan · Post by **kidan** » Mon Aug 30, 2004 1:46 am

Well first, would you mind cooling down a little? We're not here to have some BBQ (aka flamewar), but to help exp with developing anidb.net!

I think this feature is nice, thou the workaround has still got some security flaw (which I mentioned in the other thread).
It's a good thing to be able to log in from various browsers and OS permanently, as you might be dual-booting or have more than on PC in your home.
For Joe-Sixpack-Users ofcourse the invalidation of the old cookie is a good thing.

I guess a profile-option would be best, as pro-users will click the logout button in unsafe environments and thus their cookies wouldn't need to be invalidated automatically.