#5888 - Login loop when accessing CMS/Admin zones
| Identifier | #5888 |
|---|---|
| Issue type | Major issue (breaks an entire feature) |
| Title | Login loop when accessing CMS/Admin zones |
| Status | Closed (not fixable) |
| Handling member | PDStig |
| Version | 10.0.49 |
| Addon | core |
| Description | When trying to edit content in the CMS zone or access Admin CP I am getting stuck on the login screen (Your login must be confirmed before you may enter this high-security area (you do not currently have a confirmed session)), despite being logged in as admin. |
| Steps to reproduce | |
| Funded? | No |
| Commits |
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".


Comments
EDIT: Backdoor IP Is the workaround, at least I can carry on adding content ;)
The release of 10.0.49 may cause a login loop if old insecure cookies exist along with the new secure cookies.
While this patch does not specifically address this issue (the remedy is to clear your browser cookies), this patch adds additional improvements to cookie handling including trying to clean out old cookies when setting new ones. This was semi-ported from v11.
Therefore, this patch *might* take care of the problem in the event cookies are not cleared, but I haven't tested for certain.
No changes, stil a loop problem with loging.
After I am logged, prepare a News. No way to add an Image (that's another bug, it worked super fine till yesterday).
After I want to publish a News, I am kicked out as an admin, recognized by composr as a Guest, and need to relogin myself.
(Click to enlarge)
About cookies - those are the paths I have:
$SITE_INFO['cookie_domain'] = '';
$SITE_INFO['cookie_path'] = '/';
$SITE_INFO['cookie_days'] = '120';
Should I tried to change _path to '/cookie' ?
Thank you!
(Click to enlarge)
Do you have $SITE_INFO['session_cookie']? Try changing the name of that. If it has a hash (random letters and numbers at the end), try changing those.
I suspect however if clearing browser cookies did not work then this won't work either but worth a shot.
<?php
global $SITE_INFO;
$SITE_INFO['default_lang']
$SITE_INFO['db_type']
$SITE_INFO['forum_type']
$SITE_INFO['domain']
$SITE_INFO['base_url']
$SITE_INFO['table_prefix']
$SITE_INFO['master_password']
$SITE_INFO['use_persistent']
$SITE_INFO['db_site']
$SITE_INFO['db_site_host']
$SITE_INFO['db_site_user']
$SITE_INFO['db_site_password']
$SITE_INFO['user_cookie']
$SITE_INFO['pass_cookie']
$SITE_INFO['cookie_domain']
$SITE_INFO['cookie_path']
$SITE_INFO['cookie_days']
$SITE_INFO['db_forums']
$SITE_INFO['db_forums_host']
$SITE_INFO['db_forums_user']
$SITE_INFO['db_forums_password']
$SITE_INFO['cns_table_prefix']
$SITE_INFO['self_learning_cache']
$SITE_INFO['multi_lang_content']
$SITE_INFO['session_cookie'] = 'cms_session__somerandomnumbersandletters';
Of course change somerandomnumbersandletters.
I also checked cookie setting, and I have in Chrome "Allow third-party cookies".
I also tested to add an Image to the News, nope. Image is not added. If I press Save, Im kicked out as Site Admin, and need to enter the password again.
(Click to enlarge)
(Click to enlarge)
$SITE_INFO['backdoor_ip'] = 'your_current_ip';
to the bottom of your _config.php
You can get your current IP via https://www.myip.com/
Of course if your IP changes you will be logged out, but this should at least let you maintain a logged in state.