During last few days I’ve noticed very large increase of unexpected logouts on phpBB3 website. The problem was seen before, but it was not happening so often.
Users are logged out, because their session cookie is recreated almost every time they reload page. The problem does not exists when the website is accessed directly without Cloudflare.
My configuration is:
- Apache 2.4, PHP 7.2
- phpBB 3.2
- mod_cloudflare installed
- IP address validation for session disabled (phpBB configuration option)
The moment when it started dropping sessions is not correlated with any change of code or configuration on our server.
Did any one had the similiar problem? Do you know any fix or workaround?