#5888 - Login loop when accessing CMS/Admin zones

Actually just logged out, thinking relogging in might solve this. Now I cannot login.
EDIT: Backdoor IP Is the workaround, at least I can carry on adding content ;)

Try clearing your browser's cookies. I had to make a change in how Composr handles cookies so Composr might be getting stuck in a loop as you have the old cookie.

Yes that works, thanks.

Automated response: Login loop when accessing CMS/Admin zones

The release of 10.0.49 may cause a login loop if old insecure cookies exist along with the new secure cookies.

While this patch does not specifically address this issue (the remedy is to clear your browser cookies), this patch adds additional improvements to cookie handling including trying to clean out old cookies when setting new ones. This was semi-ported from v11.

Therefore, this patch *might* take care of the problem in the event cookies are not cleared, but I haven't tested for certain.

I tried the hotfix. Uploaded both files from hotfix, manually.
No changes, stil a loop problem with loging.

After I am logged, prepare a News. No way to add an Image (that's another bug, it worked super fine till yesterday).
After I want to publish a News, I am kicked out as an admin, recognized by composr as a Guest, and need to relogin myself.

(Click to enlarge)

@Bitmain Does clearing your browser cookies, or renaming the name of the session cookies in _config.php, work?

@Patrick Browser clearing is not working. Tried several times, same problem.
About cookies - those are the paths I have:
$SITE_INFO['cookie_domain'] = '';
$SITE_INFO['cookie_path'] = '/';
$SITE_INFO['cookie_days'] = '120';

Should I tried to change _path to '/cookie' ?

Thank you!

Changed the cookie path, error:

(Click to enlarge)

No, the path should be left at / .

Do you have $SITE_INFO['session_cookie']? Try changing the name of that. If it has a hash (random letters and numbers at the end), try changing those.

I suspect however if clearing browser cookies did not work then this won't work either but worth a shot.

Those are all what I have (probably default ones):

<?php
global $SITE_INFO;
$SITE_INFO['default_lang']
$SITE_INFO['db_type']
$SITE_INFO['forum_type']
$SITE_INFO['domain']
$SITE_INFO['base_url']
$SITE_INFO['table_prefix']
$SITE_INFO['master_password']
$SITE_INFO['use_persistent']
$SITE_INFO['db_site']
$SITE_INFO['db_site_host']
$SITE_INFO['db_site_user']
$SITE_INFO['db_site_password']
$SITE_INFO['user_cookie']
$SITE_INFO['pass_cookie']
$SITE_INFO['cookie_domain']
$SITE_INFO['cookie_path']
$SITE_INFO['cookie_days']
$SITE_INFO['db_forums']
$SITE_INFO['db_forums_host']
$SITE_INFO['db_forums_user']
$SITE_INFO['db_forums_password']
$SITE_INFO['cns_table_prefix']
$SITE_INFO['self_learning_cache']
$SITE_INFO['multi_lang_content']

Okay, in that case, add this to the bottom:

$SITE_INFO['session_cookie'] = 'cms_session__somerandomnumbersandletters';

Of course change somerandomnumbersandletters.

Hi, It is the same. I added line you mentioned, no changes.

I also checked cookie setting, and I have in Chrome "Allow third-party cookies".

I also tested to add an Image to the News, nope. Image is not added. If I press Save, Im kicked out as Site Admin, and need to enter the password again.

(Click to enlarge)

(Click to enlarge)

This won't fix the issues mentioned in this thread, but if you need to work on your website as the main admin account you can add:-
$SITE_INFO['backdoor_ip'] = 'your_current_ip';
to the bottom of your _config.php

You can get your current IP via https://www.myip.com/

Of course if your IP changes you will be logged out, but this should at least let you maintain a logged in state.

REVERTED in 10.0.50