XF 1.5 Users keep get logged out.

[Spleen]

Some users are reporting that they are being logged out spontaneously. One keeps getting logged out on his iPhone but remains logged in on a desktop, another reports being logged out every time he changes a page on his desktop and another one m,much the same sort of thing. Is there somewhere within XF that has a timeout or somesuch? Thanks.

 

[Amaury]

First thing to check is to make sure that they're not all either going to www or non-www. You can force redirects to one or the other.

 

[Martok]

Having checked your site, you do indeed have both www and non-www versions. As Amaury said, you need to force redirect one to the other. See point 19 in the FAQs:

https://xenforo.com/community/threads/frequently-asked-questions.5183/#post-180456

 

[Spleen]

Ok, thanks chaps. I'll get on it.

 

[Spleen]

Noob question, where can I find the .htacccess file?

 

[Paul B]

In the directory where XF is installed.

 

[Spleen]

Ok, I found it in filezilla. Can I edit it in that? (Someone else installed it for me, should I ask them to sort it for me?)

 

[Paul B]

Download it to your computer using your FTP program.
Open it in a text editor.
Edit it.
Upload it to the server using your FTP program (overwrite the existing file).

That is the not the .htaccess file though - it is the htacces.txt file.

The .htaccess file will be hidden, if it exists.
Otherwise just rename the htaccess.txt file to .htaccess.

 

[Spleen]

Right, I'll have a look at this tomorrow when I have a clearer head!

 

[Spleen]

This is the .htaccess.txt file, is this what I need to save as .htaccess?

# Mod_security can interfere with uploading of content such as attachments. If you
# cannot attach files, remove the "#" from the lines below.
#<IfModule mod_security.c>
# SecFilterEngine Off
# SecFilterScanPOST Off
#</IfModule>

ErrorDocument 401 default
ErrorDocument 403 default
ErrorDocument 404 default
ErrorDocument 405 default
ErrorDocument 406 default
ErrorDocument 500 default
ErrorDocument 501 default
ErrorDocument 503 default

<IfModule mod_rewrite.c>
RewriteEngine On

# If you are having problems with the rewrite rules, remove the "#" from the
# line that begins "RewriteBase" below. You will also have to change the path
# of the rewrite to reflect the path to your XenForo installation.
#RewriteBase /xenforo

# This line may be needed to enable WebDAV editing with PHP as a CGI.
#RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]

RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -l [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^.*$ - [NC,L]
RewriteRule ^(data/|js/|styles/|install/|favicon\.ico|crossdomain\.xml|robots\.txt) - [NC,L]
RewriteRule ^.*$ index.php [NC,L]
</IfModule>

 

[Spleen]

Also, as my site is now https, where exactly do I add this:

RewriteCond %{HTTPS} off
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

 

[Paul B]

The FAQ explains what must be added (and where) to force HTTPS and www: https://xenforo.com/community/threads/frequently-asked-questions.5183/#post-180456

Any custom rewrite rules must come before the XenForo rewrite rules.

 

[Spleen]

Ok, I'm out of my depth here so I'll just leave it.

 

[Paul B]

It's quite simple.

Just add the relevant rules to the .htaccess file, just after RewriteEngine On.

 

[Spleen]

I can't find the actual .htaccess file, I don't understand what 'Any custom rewrite rules must come before the XF rewrite rules' means and even if I do find the right file I have no idea exactly what to write in it.

 

[Paul B]

You posted the default htaccess.txt file above.

Simply rename it to .htaccess and add the new rules.

I don't understand what 'Any custom rewrite rules must come before the XF rewrite rules' means

just after RewriteEngine On.

even if I do find the right file I have no idea exactly what to write in it.

You already posted the HTTPS code above.

RewriteCond %{HTTPS} off
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

 

[Spleen]

Ok, do I put my own site address in between the brackets where is says HHTP_HOST and REQUEST_URL?

RewriteCond %{HTTPS} off
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

 

[Paul B]

Add the code exactly as shown.

 

[Spleen]

Thanks, I'll have a go and see what happens.

 

[Spleen]

Ok, I did a search for the .htaccess file and found two. One file had 'order deny, allow Deny from all' and the other one had this:

ErrorDocument 401 default
ErrorDocument 403 default
ErrorDocument 404 default
ErrorDocument 500 default
<IfModule mod_rewrite.c>
RewriteEngine On
# If you are having problems with the rewrite rules, remove the "#" from the
# line that begins "RewriteBase" below. You will also have to change the path
# of the rewrite to reflect the path to your XenForo installation.
#RewriteBase /xenforo
# This line may be needed to enable WebDAV editing with PHP as a CGI.
#RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -l [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^.*$ - [NC,L]
RewriteRule ^(data/|js/|styles/|install/|favicon\.ico|crossdomain\.xml|robots\.txt) - [NC,L]
RewriteRule ^.*$ index.php [NC,L]
RewriteCond %{HTTPS} on
RewriteRule ^(.*)$ https://%{SERVER_NAME}%{REQUEST_URI} [R=301]
</IfModule>

I'm assuming that I still put the code in after RewriteEngine On so it looks this:

ErrorDocument 401 default
ErrorDocument 403 default
ErrorDocument 404 default
ErrorDocument 500 default
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
# If you are having problems with the rewrite rules, remove the "#" from the
# line that begins "RewriteBase" below. You will also have to change the path
# of the rewrite to reflect the path to your XenForo installation.
#RewriteBase /xenforo
# This line may be needed to enable WebDAV editing with PHP as a CGI.
#RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -l [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^.*$ - [NC,L]
RewriteRule ^(data/|js/|styles/|install/|favicon\.ico|crossdomain\.xml|robots\.txt) - [NC,L]
RewriteRule ^.*$ index.php [NC,L]
RewriteCond %{HTTPS} on
RewriteRule ^(.*)$ https://%{SERVER_NAME}%{REQUEST_URI} [R=301]
</IfModule>

Is that right?