Cookies not correclty set for phpBB about owaspbwa HOT 7 OPEN

Forget the solution; that is also not working. Cannot figure out what the 
problem is, but none of the users is able to login. I get a new session id in 
each request and keep getting redirected to the login page.

Thanks for reporting this.  I believe that IP address is the one that the VM 
gets for me.  Maybe phpBB has fixed on that IP rather than grabing the current 
one when setting the cookies.  I'll look into it.

Well, I tried modifying that in the configuration table, but for some reason
I was unable to get it working.

If you need me testing something on my side let me know.

Dave

I messed around with this for a while trying to fix it for the 0.93rc1 release, 
but I couldn't get it to work.  I did go back and confirm that this did work in 
0.91rc1 and I tried copying the exact directories, files, and permissions from 
that into the newer VM and it still failed.  My current theory is that the 
update of the OS to Ubuntu 10.04 for versions 0.92 broke something.  
Fortunately, we are not on a LTS version of the OS, so hopefully we won't have 
that problem anywhere else for a while.

For 0.93rc1, this is unresolved, but I did mark in the index.html file that the 
application is currently broken.

Chuck 

I independently found the problem to be the cookie.  I attempted the DB config 
change suggested here: 
http://www.phpbb.com/kb/article/configuring-domain%2Bscript-path%2Bcookie-settin
gs/

Still didn't solve anything though... Will try a reinstall of phpbb2 and see if 
that fixes the problem

I did some work on this for the 1.0 release.  I was able to adjust some 
settings to get cookies to set properly (using the owaspbwa hostname), but 
login still does not work (nor does viewing posts). 

Leaving database in place and software running at /phpBB2/, but it is not 
listed on the landing page.  May never get fixed.