Welcome to Esato.com




Logging out with IP change


Click to view updated thread with images




Posted by Xajel
I'm accessing Esato from 3-4 devices daily, or at least 2 devices including my phone... and I'm facing the problem of esato logging out each time the IP changes, I thought it was only when I was moving from one device to another but even from my phone when using 3G, as the IP is changing all the time while browsing I just can't Browse the forum at all, even when I access the forum from a PC using the mobile data link ( tethering ), the forum just keeps logging out while browsing !!

Even now when I right this thread, I opened a new tab and it was logged out already !!

I know Esato did this for security reasons but it's so annoying having to login on all these devices while I'm the only user of them ( dedicated Windows and mac account and a mobile phone ) and specially from smartphone when it just logging out while browsing duo to always changed IP address... I hope Esato disable this thing and use cookies mainly and not sessions, or at least gives the user to have cookies instead of sessions if they wish...


Posted by fluke9
I have the same problem.

Tis a real pain.

Posted by Supa_Fly

On 2012-11-25 08:16:42, Xajel wrote:
I'm accessing Esato from 3-4 devices daily, or at least 2 devices including my phone... and I'm facing the problem of esato logging out each time the IP changes, I thought it was only when I was moving from one device to another but even from my phone when using 3G, as the IP is changing all the time while browsing I just can't Browse the forum at all, even when I access the forum from a PC using the mobile data link ( tethering ), the forum just keeps logging out while browsing !!

Even now when I right this thread, I opened a new tab and it was logged out already !!

I know Esato did this for security reasons but it's so annoying having to login on all these devices while I'm the only user of them ( dedicated Windows and mac account and a mobile phone ) and specially from smartphone when it just logging out while browsing duo to always changed IP address... I hope Esato disable this thing and use cookies mainly and not sessions, or at least gives the user to have cookies instead of sessions if they wish...



Yes its a security measure - not just with Esato but for many other sites. You're asking the world to bend around your habits & expectations.

The issue is not Esato, not directly, but in how you're using Esato Forums. BTW, its not a changing IP address but with Cookies.

Test:
Sign-Out of Esato on ALL your devices before continuing.
Sign-In to Esato on your smartphone over 3G. Browse another thread here on Esato to ensure you're signed-In.
Change from 3G to WiFi (if you're smartphone auto prioritizes WiFi; and has no bug doing this in the OS), browse a NEW thread within the forums here on Esato. Still signed-in?
> You've proven my presumption this is a Cookies effect. Want more evidence.
- remain signed in on your smartphone (3G/WiFi; the latter the more recent).
Sign-In to Esato on a PC. [PC must be connected to Internet at home via Home WLAN to DSL/Cable Internet Modem)
On the smartphone goto another new thread in the Esato Forums. Result? (No longer signed in are you?)
Traverse a new thread on the PC. Signed-In still?
>> I've concluded its a cookies effect. Think of it trying to Open the same door to the same house while your down the street & in front of the door; not physically possible (unless you're Mr. Fantastic). I experienced this some 5yrs ago I think.

The strange thing is your phone sympton ... do you have some sort of proxy setup on the smartphone (via Settings, the browser or an application running)??

Posted by TeeGee
Experienced this too, meanwhile got used to it .
I'm constantly logged in to Twitter and several forums (even two as a mod) on my pc, laptop, tablet and two phones, no probs at all! The only exception being Esato, where I can't stay logged on one device, as soon as I log in on another.
When this is for security reasons, why then isn't this a problem with Twitter and the other forums (one of which is about tweaking of pc's and smartphones, so certainly more high-tech, than Esato)? They all use cookies.

Posted by Xajel
@Hardened

I'm not talking about security, I'm talking about relying only on Sessions or IP based cookies is just old school and its not reliable these days specially with huge amount of peoples accessing from mobile or using their mobile data to access the internet...

lets say I'm logged out of all my devices, then I used my mobile to access the forum, okay I'm in the main page, then a sub forum, then I entered a topic, and now I would like to reply on it... I'm still logged in, I click the botton to write my reply ( like what I'm doing now ), then click post button to post the reply, but I'm faced with Login page !!... note that I'm logged out of all other devices, and didn't logged in any where i'm just using my mobile !!

the problem is mobile switches between different networks specially when idle as there's no need to use the HSDPA or LTE network while not using that much of data to save power, it will go to GSM speed ( EDGE )... these switching will gives you another IP each time the mobile switches to different network...

If I want to browse normally or want to keep my IP, then I have to set the Network mode to WCDMA only ( or LTE only in some regions ) but this will have huge impact on battery and also have much less coverage than GSM networks, that's why most peoples use the switching mode ( WCDMA (preferred)/GSM ) mode which automatically switch between both networks if the WCDMA is available and needed...

No other website even as what @TeeGee mentioned before more important than Esato uses such way, Facebook, Twitter, Gmail, etc.. all using normal cookies...

the only website I know that have such security is when you're a webmaster of a shared or dedicated server and want to access the cPanel of the website... it will use Sessions not Cookies... When I try to access the cPanel from mobile (or using the mobile data) it will be impossible and the site will always give me ( IP Changed, please login again )... I have to set the mobile to WCDMA only or GSM only if I want to access that website...

I know, I have to copy this post as I know the next page will be the login page as I'm using my mobile data through USB tethering...

Posted by laffen
I am looking into this one. Might do some changes to the login procedure.

Posted by fluke9
I have about 30 odd forums I frequent daily, it's only this one I have the problem with.

I can except it, as said can be a pain on the iPhone.
[ This Message was edited by: fluke9 on 2012-11-27 13:08 ]


Posted by laffen
I've done some changes to the login procedure. Please let me know if you still have this constant sign out problem. The only way for us to be completely secure is to use the https protocol. Which means that all communication between Esato and the user is encrypted. Currently, that is not an option, so we have to take care of this another way.



Posted by Bonovox
Before I had.occasions where I had logged out and cleared cache,history etc and closed browser. Only to browse again half hour later but not log in and I still show as online. Doesn't always happen though

Posted by Supa_Fly

On 2012-11-26 09:08:19, Xajel wrote:
@Hardened

I'm not talking about security, I'm talking about relying only on Sessions or IP based cookies is just old school and its not reliable these days specially with huge amount of peoples accessing from mobile or using their mobile data to access the internet...


Well yes its old-school, but it seems that it IS reliable - as you're experiencing issues, based on a security standpoint. Just because you're not talking about security, doesn't mean its NOT applicable. You're experiencing exactly that.



On 2012-11-26 09:08:19, Xajel wrote:
lets say I'm logged out of all my devices, then I used my mobile to access the forum, okay I'm in the main page, then a sub forum, then I entered a topic, and now I would like to reply on it... I'm still logged in, I click the botton to write my reply ( like what I'm doing now ), then click post button to post the reply, but I'm faced with Login page !!... note that I'm logged out of all other devices, and didn't logged in any where i'm just using my mobile !!


Not once in your explanation above is in any way similar to your original post. Also note that what I've highlighted (bolded, underlined) shows that you have YET to logon? (sure its implied but i'm thinking since you didn't type it, it wasn't actually done). let's say for a moment in the example above you did logon. But let's say you did so on a provider network using the browser ... then you switch to a corporate/small business wlan or even a public wlan? Wireless providers have their own specific gateways that maybe a possible cause to what you're experiencing - again something to do either with changing IP address and well I'm assuming cookies.


On 2012-11-26 09:08:19, Xajel wrote:
the problem is mobile switches between different networks specially when idle as there's no need to use the HSDPA or LTE network while not using that much of data to save power, it will go to GSM speed ( EDGE )... these switching will gives you another IP each time the mobile switches to different network...


^ if this example is occuring then its precisely related to your provider. They have different GGSN's managing varying range of gateways and their not linked together from GPRS/EDGE vs HSPA/LTE ... either due to the backbone fiber or something related to specific SOCs (billing term for provisioning of features; data plan in this case) for GPRS/EDGE vs HSPA/LTE. I cannot tell you just how many users on T-Mobile USA went APESHIZZZ when their engineers screwed around with similar changes. I cannot pretend to know all the intricases but its a lamens term guess I have.

.....


On 2012-11-26 09:08:19, Xajel wrote:
I know, I have to copy this post as I know the next page will be the login page as I'm using my mobile data through USB tethering...


^ USB/WLAN tethering from providers data connection; another SOC enables this & from my lamens (lame yes) suspicions this is whats going on, along with Esato's setup.

(SOC = Service Order Code; which links to the switch interface most customer service reps at providers don't have access too, but higher tech resp or engineers do).

Posted by Xajel
@Laffen,
Thanks laffen, to this time I'm seeing the problem is gone ( I already wrote two reply's without being logged out, and this is another edit also without the problem )...



@Hardened,
Wow, just your name tells me you make thing too complicated... did you see @fluke9 and @TeeGee and they have the same problem ? so what do you think now ?
I was clear from the start and you're making it complicated, I've been logged out randomly when I use my mobile data ( from mobile or tethered to a PC/Laptop using USB or WiFi )... and because I'm a Webmaster for several websites I'm also facing the problem of ( IP changed, login failed ) when trying to manage or accessing the cPanel of these websites when using my mobile data, that's why I assumed that the forum is using IP based sessions rather than cookies only...

I'm done with it If you don't get it, then don't... you will loose nothing any way and this doesn't concern you either...
[ This Message was edited by: Xajel on 2012-12-05 16:51 ]


Posted by Supa_Fly
that's fine ... but the situation is still affecting you. I'm not trying to piss you off I'm trying to point out what I think is going on. Just because you're a web administrator doesn't mean all sites are the same and should follow what you believe is right in practice - it the internet after all.

It concerns me because it concerns you and it does affect me - I've said I see the same thing too. I'm just not annoyed by it. Also I can learn from this if there is a resolution. I'm guessing you have tools to show what you're experiencing as a web administrator, no?

Proper troubleshooting: Just because you and 2 others are affected doesn't mean it's you or them - I never argued that. Obviously its Esato. I agreed about this! You're explanation if you RE-READ everything in every post you type - read it aloud and see how it kinda is not clear (the post just above your very last one misses a few steps). I get that this was an accident or typo ... but I highlighted it for clarity. I get that english is not everyone's first language (and could've been the reason I misunderstood the post I've highlighted above).

PS: My former name was Prom1 for a very long time on these boards. Don't make assumptions of a person just based on their name; never judge a book by its cover.


Click to view updated thread with images


© Esato.com - From the Esato mobile phone discussion forum