XF 1.4 How to reset sessions ?

[Recep Baltaş]

Hi, we have started using Sucuri service but they have made a "little" mistake of enabling fully caching and this led to users finding themselves in other people's accounts.

We have disabled caching and the problem seems to be solved but I want to make sure by resetting sessions.

How can I do that ?

Thanks.

 

[Paul B]

You could truncate the session table, if that's what you mean.

 

[Recep Baltaş]

You could truncate the session table, if that's what you mean.

I think yes. That is what I should do.

 

[Recep Baltaş]

Truncated the tables but I am still logged in. Any idea ?

I am admin. But I have also truncated Admin Sessions...

//Let's change the cookie prefix.

 

[Mike]

If you chose the "stay logged in" option, you don't depend on the session. There isn't a bulk way to invalidate that.

 

[Recep Baltaş]

If you chose the "stay logged in" option, you don't depend on the session. There isn't a bulk way to invalidate that.

Changing the cookie prefix won't help you are saying ? As stated here?

https://xenforo.com/community/threads/log-out-all-users.50638/

 

[Mike]

Well it will work by changing what XF reads, but it doesn't actually invalidate the old data. If someone has the old cookie value, they could still change the name on it and it'd work.

 

[Recep Baltaş]

Since I am 100% sure that none of them know how to change it, it will work

Do I have to provide a domain name ? How should it be ?

Our web site:

https://www.technopat.net/

Forum:

https://www.technopat.net/sosyal/

$config['cookie'] = array(
    'prefix' => 'xft_',
    'path' => '/',
    'domain' => ''
);

 

[Paul B]

What you have above will work, unless that is your current prefix.
In which case just change it to xf_.

 

[Recep Baltaş]

If will be my new prefix. Thaks a lot.