Starting and shutting down the forum with mobiles.

Affected version
v2.3.7
Some of my members are complaining that they are struggling to sign into the forum, or sign out with mobiles, (especially iphones) since I updated it to the latest version v2.3.7 from v2.3.4

Is anyone else having this problem and is their a solution to it?
 

Attachments

  • Screenshot 2025-09-20 at 19.39.07.webp
    Screenshot 2025-09-20 at 19.39.07.webp
    42 KB · Views: 21
any tips in these threads ?

That site seems to have configured their installation to set Strict same-site cookies, which will mean your cookies aren't visible to the server for cross-site requests like this. Making a new request from the site (ie. navigation to a page) will allow the server to see the cookies, while reloads are still considered cross-site requests. Our session keep-alive behavior sends a same-site request in the background which detects this situation and displays this message.

They can set their cookie same-site configuration to Lax (or remove it entirely to use the browser default, generally Lax, which is the stock XF behavior) to mitigate this.

what are your cookie settings ?
 
That option won't have any impact since it's for the cookie consent notice Most places not in the EU, California or a few other jurisdictions will have it disabled. Cookies are still sent. :-)

Ask them if they are visiting the via www or non-www, and if that's ever changed? If the cookie gets set for the www variant, the non-www isn't going to be able to read the cookie.

Make sure your domain can only use one or the other, and redirect the variant not being used. Also, set the cookie domain in config.php to the non-www variant (it can be read by both www and non-www).
 
Back
Top Bottom