All Users have to log in EVERY visit after SSL /Cookie change

Get help with installation and running phpBB 3.3.x here. Please do not post bug reports, feature requests, or extension related questions here.
Post Reply
Dezdan
Registered User
Posts: 197
Joined: Thu Apr 17, 2003 8:18 pm

All Users have to log in EVERY visit after SSL /Cookie change

Post by Dezdan »

In order to correct issues with images (hears, etc.) not displaying for some users I changed the server protocol from http:// to https://, enabled secure cookies, changed cookie name, and purged all sessions. That correct the issue, but now every visit users have to log in. If you follow a link away from the board and then return moments later, you have to log in again. What am I doing wrong?

Support Request Template
What version of phpBB are you using? phpBB 3.3.7
What is your board's URL? www.website.com
Who do you host your board with? Myself
How did you install your board? I used the download package from phpBB.com
What is the most recent action performed on your board? Update from a previous version of phpBB3
Is registration required to reproduce this issue? Yes
Do you have any MODs installed? No
Do you have any extensions installed? Yes
What version of phpBB3 did you update from? phpBB 3.3.5
What extensions do you have installed? Board Announcements 1.1.0
Board Rules 2.1.2
Confirm Email 1.0.0
External Link In New Window 1.1.0
phpBB Media Embed PlugIn 1.1.2
Userreminder for phpbb 1.4.2
[**] User details 3.1.0-RC1
What styles do you currently have installed? ProSilver
What language(s) is your board currently using? Eng
Which database type/version are you using? MariaDB
What is your level of experience? Experienced with PHP and phpBB
What actions did you take (updating your board; installing a MOD, style or extension; etc.) prior to this problem becoming noticeable? Changed server protocol from http:// to https://, enabled Cookie secure, changed cookie name, purged all sessions.
Please describe your problem. All users (registered users, mods, admin) are logged out upon navigating away from the forum. Users have to log in every visit.
Generated by SRT Generator
Last edited by Dezdan on Sun Jun 26, 2022 8:37 pm, edited 1 time in total.
User avatar
Noxwizard
Support Team Leader
Support Team Leader
Posts: 10551
Joined: Mon Jun 27, 2005 8:41 pm
Location: Texas, USA
Name: Patrick Webster
Contact:

Re: All Users have to log in EVERY visit after SSL /Cookie change

Post by Noxwizard »

Your board is still accessible via HTTP. Since you have enabled secure cookies, users visiting using HTTP will not receive cookies and will be logged out when they browse away. You should add a redirect that sends users visiting from HTTP to HTTPS.
[Support Template] - [Read Before Posting] - [phpBB Knowledge Base]
Do not contact me for private support, please share the question in our forums.
Dezdan
Registered User
Posts: 197
Joined: Thu Apr 17, 2003 8:18 pm

Re: All Users have to log in EVERY visit after SSL /Cookie change

Post by Dezdan »

DOH! Always the simplest thing! Thank you!

That fixed it, thanks!
Post Reply

Return to “[3.3.x] Support Forum”