XF 1.1 Error trying to test permissions

[Will]

I get this error when clicking Test Permissions.

"Please login via the public login page before testing permissions."

It used to work before but now it doesn't. I don't understand this because I am already logged in.

 

[Jake Bunce]

Are you logged in to the front end? Maybe you are only logged in to the Admin CP.

 

[Will]

Are you logged in to the front end? Maybe you are only logged in to the Admin CP.

Yes, I am logged in. When I click the Admin CP link and I sign in, it logs me out of the frontend. The Test Permissions page shows up but I actually can't test it because I'm not logged in on the frontend. So when I do log in, it then gives me the error.

 

[Jake Bunce]

Login to the Admin CP, then login to the front end. Then test the permissions.

Alternatively you can open another browser to login as a separate user and test permissions that way.

 

[Will]

Login to the Admin CP, then login to the front end. Then test the permissions.

Alternatively you can open another browser to login as a separate user and test permissions that way.

I found out that it had to do with my .htaccess file. I removed everything that is in there for xF by default and it now works. Any idea why?

Edit: Nevermind. Seems as it is conflicting with my redirects.

 

[Will]

Can anyone help me sort out my redirects. I want something like this but I'm no pro at this stuff so I appreciate any tips. Basically I want to use https on admin.php, get rid of the http, and remove https on the frontend. As said in this thread before, it won't allow me to Test Permissions but I believe I had it working before. I recently setup Nginx to serve static content so I don't know if that changed anything. I rather get some input from people that know a little more than me.

RewriteEngine On
RewriteCond %{SERVER_PORT} 80
RewriteCond %{REQUEST_URI} forums/admin.php
RewriteRule ^(.*)$ https://domain.com/forums/$1 [R,L]
 
RewriteCond %{HTTPS} on
RewriteRule ^/?$ http://domain.com/forums/ [R=301,L]
 
RewriteEngine On
RewriteCond %{HTTP_HOST} !^domain\.com$
RewriteRule ^(.*)$ http://domain.com/forums/$1 [R=301,L]

 

[Jake Bunce]

Can anyone help me sort out my redirects.

http and https may have different cookie scopes. I came across one proposed solution which is to set your cookie domain. You can set the cookie domain by adding this code to the library/config.php file:

$config['cookie'] = array(
	'prefix' => 'xf_',
	'path' => '/',
	'domain' => 'domain.com'
);

This solution doesn't seem right to me, but I don't have a secure cert to test this.

It may also have something to do with the Secure attribute of the cookie:

http://en.wikipedia.org/wiki/HTTP_cookie#Secure_and_HttpOnly

In looking at the code I can see that XF enables this attribute when writing cookies over a secure connection. That would limit the scope of the cookie to https. Changing this requires modifying the files.