A little bug discovered recently by our team, which affects the default version of authorization file
bb_cookie.php. MiniBB will try to reset authorization cookie i.e. make it
living longer, if its expiration time stands closely to
$cookie_expires setting's value.
In such case, the cookie is being set improperly in the current version, so instead of improving the cookie, it may be completely deleted instead.
Here is a very simple fix: locate the code which says
if($resetCookie) {
deleteMyCookie();
setMyCookie($username,$userpassword,$GLOBALS['cookieexptime']);
}
if($resetCookie) {
deleteMyCookie();
setMyCookie($username,$userpassword,$GLOBALS['cookieexptime'],FALSE);
}
You should add
FALSE to the end of the function.
Will be fixed in the next miniBB version.
