Uploaded image for project: 'phpBB3'
  1. phpBB3
  2. PHPBB3-17127

Guest users stats got purged when resetting password

    XMLWordPrintable

Details

    • Bug
    • Status: Closed (View Workflow)
    • Minor
    • Resolution: Fixed
    • 3.3.10
    • 3.3.11
    • Other
    • None

    Description

      When any user resets password, all guest sessions got purged from the sessions table, so all  [guest] online statistics gets nulled.

      The cause is the following.

      The security fix https://github.com/phpbb/phpbb/commit/827c135cc9b0b187a61a2d9e0f64592cce7418ff

      has added $this->user->reset_login_keys() function call without parameters. A user is not logged in while resetting password, hence guest user_id is used to clear all user's sessions.

      Attachments

        Activity

          People

            Marc Marc
            rxu rxu
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: