Users forcibly logged out when visiting pages. Mods also logged out when doing tasks.

HayanTokki · Post by **HayanTokki** » Fri Sep 21, 2018 4:06 pm

Support Request Template
What version of phpBB are you using? phpBB 3.2.3
What is your board's URL? http://www.blockhermit.com
Who do you host your board with? dreamhost
How did you install your board? I used the download package from phpBB.com
What is the most recent action performed on your board? Fresh Install
Is registration required to reproduce this issue? Yes
Do you have any MODs installed? No
Do you have any extensions installed? Yes
What extensions do you have installed? Auto Groups
H2O Theme: Control Panel
Pages
Remove Subject from Replies
Topic Solved
What styles do you currently have installed? prosilver, h2O
What language(s) is your board currently using? British English
Which database type/version are you using? MySQL 5
What is your level of experience? New to phpBB but not PHP
What username can be used to view this issue? TestAccount
What password can be used to view this issue? k7Somqq9
What actions did you take (updating your board; installing a MOD, style or extension; etc.) prior to this problem becoming noticeable? Installed pages.
Please describe your problem. Myself and all my users are forcibly logged out with or without remember me as soon as they click on any pages and return to forum. Likewise, my moderators are also forcibly logged out every time they mark a topic solved, but not when they lock a topic. We have double and triple checked our settings to work with the SSL to the best of our knowledge following also the commonly reported problems about login/logout that others have reported.
Generated by SRT Generator

Lumpy Burgertushie · Post by **Lumpy Burgertushie** » Fri Sep 21, 2018 4:17 pm

you apparently do not have the SSL setup correctly. your domain name is not secure according to my browser and my test script.
however, you do have cookie secure set to yes. that is what is causing your logout problems.

robert

Post by **Brf** » Fri Sep 21, 2018 4:31 pm

Since you are using secure-cookie, you should be using https: not http:

HayanTokki · Post by **HayanTokki** » Fri Sep 21, 2018 4:37 pm

I apologize for the images, but wasn't sure otherwise how to show you the settings. These are my default settings currently. How would I change this to fix the issue? Thank you for your time.

Post by **Brf** » Fri Sep 21, 2018 4:39 pm

Dont change the settings... Type in https: in your web browser's address bar.

HayanTokki · Post by **HayanTokki** » Fri Sep 21, 2018 4:50 pm

When I type in https, it shows as secure but will log me out still after visiting 'vote' and then back to forum which will switch to http again. I have an ssl certificate, where am I going wrong? If I force https, I get an error. My cookie secured settings are enabled because I have an SSL certificate.

Post by **Brf** » Fri Sep 21, 2018 5:05 pm

There is no reason for your browser to switch to http, unless you are clicking a link which says http, rather than https

HayanTokki · Post by **HayanTokki** » Fri Sep 21, 2018 5:19 pm

Thank you! Seems to have fixed everything, somehow. I changed the header links to link from http to https, seems now that everything automatically comes up as https now.

advertisements