I could really use some help with a baffling cookie problem

[Psythor]

YaBB SE Version: 1.5.4
PHP Version: 4.3.2
MySQL Version: 3.23.x
Server Platform: Unix, Linux, or BSD
Link to Forum: http://forums.pkmn.co.uk

Problem Description:
Hi,

In the last two years, I have developed the YaBB user system for my site, making different features members only and all sorts. We based most of the members only stuff on the fact that $HTTP_COOKIE_VARS['YaBBusername'] didn't equal a blank, and went as far as using session cookies that had data in them read from the members database.

Anyway, since upgrading to 1.5.4, some of the users arn't able to access cookie-based things on the site. Of course, the cookie is set to the forums directory, as opposed to subdomain, as always- it just doesn't seem to want to cooperate.

I think this has something to do with YaBBuser- and when that is unserialised, (line of code pasted from Load.php), it gives the users ID number, and a string of what I think must be the encrypted password encrypted by something else, again. (Or so LogInOut.php leads me to believe).

Anyway, could anyone shead any light on how I can get my site and scripts to work with the what I guess is a new cookie structure, in LogInOut workings? Mainly the differences between 1.5.1 and 1.5.4.

Thanks in advance,

James O'Malley
www.pkmn.co.uk

[[Unknown]]

Look at LoginOut.php and Load.php.  There have been several changes, and now it's stored in a serialized cookie....

list ($ID_MEMBER, $password) = unserialize(stripslashes($_COOKIE['sadasdasd']));

Or similar...

-[Unknown]