Thanks very much to the developers for playing catchup to WP's cookie shenanigans.

http://bbpress.org/forums/topic/cookie-integration-problem-wp28-bb-10-rc-2

WP developers simply do not give a darn anymore about backwards compatibility, they just want to do whatever they want to do. Personally I'm getting really tired of their attitude.

the code doesn't work 100% in my installation.

After the Login in WordPress - my testuser is shown as "logged", but I can't go to the Administration. :( The System doesn't redirect me. At the same time my testuser ist shown as "logged in" in bbPress and there I can go to the admin.

When I test the login from bbPress first nothing seems to happen. I'm not logged in in both bbPress and WordPress.

hmpf ... So ... I'm going to test tomorrow again.

thanks for your fix - I will test it soon - after a little "distance" from my computer. :)
Today - it's to sunny ... so i must go to the mountains. :)

A quick cliffnotes version:
Took 2 main changes.. a) I had to update the validate_auth function in the _freshly_Baked_cookies plugin to make it work with the new password-including authentication. b) I had to modify the bb-include/pluggable.php to use the new algorithms for salting & auth (wp_salt and wp_auth). The ones that ship with bbpress don't pass a Schema around, and apparently it's important now.

If you want the two files, you can download them from http://www.yeraze.com/bbpress-wp2.8-fbc_fix.tgz . i really hope _ck_ can take a look at this and see if it can all be encapsulated within the fbc plugin.. As it is now, soon as I upgrade bbpress I'll lose it again.

I took a look at ck's original plugin and it mentions support for WordPress 2.8 (as of 3/13/09):
http://bbpress.org/plugins/topic/freshly-baked-cookies/

But this post (from 4/3/2009) on ck's blog points out that WordPress 2.8 changed their login model:
http://ckon.wordpress.com/2009/04/03/wordpress-28-might-break-login-compatibility-again/

Sounds like WordPress may have changed it after the Freshly Baked Cookies plugin was released, breaking the FBC plugin?

In WP2.7, in wp-includes/pluggable.php (line 512)

if ( $expired < time() ) {
do_action('auth_cookie_expired', $cookie_elements);
return false;
}

$key = wp_hash($username . '|' . $expiration, $scheme);
$hash = hash_hmac('md5', $username . '|' . $expiration, $key);


and in 2.8:

// Quick check to see if an honest cookie has expired
if ( $expired < time() ) {
do_action('auth_cookie_expired', $cookie_elements);
return false;
}

$key = wp_hash($username . $pass_frag . '|' . $expiration, $scheme);
$hash = hash_hmac('md5', $username . '|' . $expiration, $key);


So, in 2.8 the hash is salted with 4 character's of the USer's password. The "freshly_baked_cookies" plugin hasn't been upgraded to match this change, so it always fails to match the hashed cookies.

Unfortunateyl,the get_userdatabylogin function doesn't seem to exist in bbpress.....

Upgrading to BBPress .9.0.5 hasn't helped...

So ...

Is there a solution?

I seems to be a "hot" topic - and that's probably the reason why we search for the last 2 hours for a solution. :) *selfironic*

Here the cookie-names and paths - they are identical. So the error eventually is not in seeting the cookies, but in reading of the cookies. !?

After Login in WordPress
wordpress_logged_in_672b8ff18484c1d9d7de0f05d907543d - Path: /wp/
wordpress_logged_in_672b8ff18484c1d9d7de0f05d907543d - Path: /
wordpress_672b8ff18484c1d9d7de0f05d907543d - Path: /wp/wp-content/plugins
wordpress_672b8ff18484c1d9d7de0f05d907543d - Path: /wp/wp-admin

After Login in BBpress
wordpress_logged_in_672b8ff18484c1d9d7de0f05d907543d - Path: /wp/
wordpress_logged_in_672b8ff18484c1d9d7de0f05d907543d - Path: /
wordpress_672b8ff18484c1d9d7de0f05d907543d - Path: /
wordpress_672b8ff18484c1d9d7de0f05d907543d - Path: /wp-admin
wordpress_672b8ff18484c1d9d7de0f05d907543d - Path: /wp/wp-admin
wordpress_672b8ff18484c1d9d7de0f05d907543d - Path: /wp/wp-content/plugins

Path of Installation:
http://www.mysteria30000.de/wp -> WordPress
http://www.mysteria3000.de/forum --> bbPress

Greetings
Markus

1. upgrade of bbpress .9.0.5 - 1 hour after the posting. ( a week ago? )
2. upgrade of wordpress 2.8 - 2 hours ago.
3. the break of cookie - right after the upgrade of wordpress

Also - what was the last working set of versions that was fully integrated (bb 9.0.4 and wp 2.7?).

I'm using ck's and johnmc's 'Freshly Baked Cookies for bbPress'.

Log in bbpress, automatic log out from wordpress,
log in wordpress, automatic log out from bbpress.

my bbpress v. 0.9.0.5

What's the cause of such a problem.
I'll be greatly appreciated if any one solve the problem.

Thanks.