Print

[Ryoko]

I have the following issue when trying to bridge coppermine and current version of phpbb:
When clicking "login" via coppermine, I get taken to the forum login page.
I cannot have coppermine tell me that I'm logged in, no matter what I try to do.

Coppermine install: http://gallery.cutecorner.com (/home/himeko/gallery.cutecorner.com/)
Forum install: http://forum.cutecorner.com (/home/himeko/forum.cutecorner.com/)
Coppermine version: whatever is newest at the time of writing this.
Forum version: phpbb 2.0.21
Test user account: [removed - Nibbler] (user created on phpbb, not on coppermine)

BridgeManager settings:
Forum URL:      http://forum.cutecorner.com
Relative path to your BBS's config file:    ../forum.cutecorner.com/
Use post-based groups?:    1
Cookie prefix:    cutemysql

[Nibbler]

Please enable bridging so we can test your issue.

[Ryoko]

done.

[Nibbler]

Due to the fact you are using subdomains, you must set your cookie domain to .cutecorner.com in phpbb for the cookies to work across them.

[Ryoko]

I did just as you told me so, and now I cant login at all >_<
Will send you main admin account credentials via pm in a sec.
Btw, thanks for your help.

Cant pm you...lol >_<

[Nibbler]

You set the cookie domain correctly, however you also set the cookie path to ../ which can't be a good thing. Try clearing your cookies and logging into phpbb again. If you can't get into it then you'll need to fix the setting in the database using phpmyadmin. Please don't PM dev team members unless requested.

[Nibbler]

I noticed the account you posted has admin rights, so I was able to correct the cookie settings myself. It's not a good idea to post admin data on a public forum.

[Ryoko]

Sorry about trying to pm you.
As for admin: its only an admin temporarily.
Btw, try logging in: I cant login >_>

[Nibbler]

Clear your cookies first, the old cookies need to be removed from your browser.

My point about the admin account is that I could have already installed a script to steal your users passwords and email addresses or worse and you wouldn't even know about it.

[Ryoko]

ah i c. Didn't know that kind of stuff could be done >_<
Well thank you, it works now.

[Joachim Müller]

Admin can do anything, that's the whole idea behind it, in all applications and operating systems. Imagine anything bad that could happen and it will happen if a malevolent user gains access to admin accounts. That's why you're suppossed to keep your admin account safe no matter what. There's no such thing as a "temporary admin account". For security reasons it's mandatory that you change passwords for all systems that may have gotten corrupted by a malevolent person because of your admin account posting.