#3672 - Login Loops
-
By Master Rat
- Added
- 11 views
| Identifier | #3672 |
|---|---|
| Issue type | Minor issue (breaks specific functionality) |
| Title | Login Loops |
| Status | Closed (cannot reproduce) |
| Handling member | Chris Graham |
| Addon | galleries |
| Description | Every time I am trying to post something using my admin account it keeps making me re-login to validate I have a active cookie set. On several occasions it just loops for 3 times and data I am trying to post is lost. My browsers are set to accept cookies but still seems to be a annoying loop for security when your already logged in once....? |
| Steps to reproduce | Any functions done by admin seems to make this re-affirmation of session/cookie is set even though I have already logged in originally. |
| Funded? | No |
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".
Comments
Home → Admin Zone → Setup → Configuration → Security options screen, do you have Enforce IP addresses for sessions ticked? This options, I think is set to 'TRUE' by default. I had the same issues sometime ago, and it happens if your ISP changes your IP address between connections.
Here's the text from the help tooltip:
Whether sessions should be tied to IP addresses. Enable to increase traceability and security. Users with erratic connections (e.g. frequent changes of wifi zones), and users sharing accounts, will keep losing their secure logins if this option is enabled. We recommend that you keep this option enabled on production sites.
Default: Yes
It sounds like the session cookie isn't working properly.
Try using an incognito window. If everything works fine in there then that suggests the problem is a duplicate cookie under a different path/domain combination. Modern web browsers allow you to inspect and erase individual cookies.
If this doesn't help, check the cookies really are saving by using the tools in your browser.
Check the configured cookie domain and path are valid (they're in _config.php).