XF 1.5 ** URGENT **: LOGIN PROBLEM

[flowerpot132]

Our users and us (admins) are experiencing a problem logging into our forum. One of the admins could not login even though he was DEFINITELY typing in the correct password. I sat next to him and watched him.

Also members are saying:
"I have had to reset my password twice in the last couple of days, but still I am not being allowed access to the members content. I have reset it again this morning, but still keep getting the message “ you need to be registered”.

So I reset her password to "password" and told her to login using that.

She said:
"I have just tried that and it still won’t let me in – telling me my password is incorrect. I have tried 3 times."

Nothing has changed on the forum. Addons etc.

Any help, much appreciated. Thank you

 

[flowerpot132]

Ok you might be onto something here! Our forum is not S, but you can login with https. But if you do then you can't then login as none S! Even if you clear cache. How would you login after this? That is the issue our users where having. Thank you DWjames and Robust and Digital Doctor for thinking outside the box.

 

[flowerpot132]

I think the jumping around from s and none s is causing problems with logging in? Would that make sense?
So the forum isn't S. But you still can login using S! If you go into the url and put an s on it. And if you do then you go back to non S you can't log in. Then if you go back to S you can't log into it that either and basically can't log into s or non s. Confused?

 

[Robust]

Ok you might be onto something here! Our forum is not S, but you can login with https. But if you do then you can't then login as none S! Even if you clear cache. How would you login after this? That is the issue our users where having. Thank you DWjames and Robust and Digital Doctor for thinking outside the box.

Logging in with https will mean you will not be logged in for the http version of the site. It should not mean that you cannot login at all via http.

I would advise forcing either http or https, though.

 

[Brogan]

For anyone else stumbling across this thread, and as I responded in the ticket, all pages of a site should be one or the other - HTTP or HTTPS.

As Magento is being used in this case, which is already HTTPS (and should remain so), the solution is to switch XF to HTTPS.

This guide covers that: https://xenforo.com/community/resources/how-to-implement-ssl-to-secure-http-traffic-https.5425/