[Chuck S]

In your ib2.php file try this

if ( ($sessionid) && ($sessionid == $session_id) ) {
$checkpass = 1;
}
elseif ($converge_hash) {
if ($converge_hash == $finalpass) {
$checkpass = 1;
}


change it to this

if ( ($sessionid) && ($sessionid == $session_id) ) {
$checkpass = 1;
}
elseif ($converge_hash) {
if ($converge_hash == $finalpass) {
$checkpass = 1;
}
elseif ( $member_id && !$session_id ) {

setcookie("{$Globals['cookieprefix']}session_id","$session_id","0","{$Globals['cookie_path']}", $Globals['domain_path'] );

$ipaddr = findenv("REMOTE_ADDR");
$agent = findenv("HTTP_USER_AGENT");
$browser = addslashes( substr($agent, 0, 30) ) ;
$sesstime = time();

if ( !empty($Globals['dprefix']) ) {
$stable = "{$Globals['dprefix']}sessions";
}
else {
$stable = "ibf_sessions";
}

$query = "DELETE FROM $stable WHERE member_id='$userid'";
$result = ppmysql_query($query,$db_link);
ppmysql_free_result($result);

$query = "INSERT INTO $stable (id, member_name, member_id, running_time, member_group, ip_address, browser, login_type)
VALUES ('$session_id','$username',$userid,$sesstime,'$usergroup','$ipaddr','$browser',0)";
$result = ppmysql_query($query,$db_link);
ppmysql_free_result($result);

$checkpass = 1;
}