Thread

Hello Luke,

That’s great. Let us know how it goes.

Cheers,

Looks like this has fixed the issue!!!! everyone is reporting logging in without problems.

Can this please be added as a config, or setting in the control panel in the next release?

I dont want to loose this when updating the site in the future.

Hello Luke,

I am really glad to see that you are back in business.

The best route to take here is to create a Feature Request.

For now, please keep track of the change for future updates.

Is there anything else I can help you with?

Cheers,

Yes, you can help by encouraging the development team to incorporate this feature request.

Having to maintain core hacks across clients and upgrades is a nightmare and this is a real bug. not a feature.

Hello Luke,

I will pass your sentiments on to the development team.

For now keep tracking the modification and if something changes I will let you know.

Regards,

ok, so I am bumping this back up to the top again to add an additional issue.

since implementing the fix of commenting out the IP address check, users have had no problem logging in from singapore - but we have are now having another problem:

users in singapore are having an issue when posting content in various and random channels and other places in the control panel.

This goes for updating a post and publishing a new one. What happens is the user can navigate to the publish/edit screen fine, and change content, but when they click on submit, it boots them back to the CP home screen, and the form does not save the data to the channel.

No one else is having this problem around the world.

I suspect this is related to the IP address in the session so I did a code search for IP checking on form submits and couldnt find anything, but I may not have looked correctly.

Could someone help asap.

Thanks,

Luke Holder

v2.3.1 - Build: date 20111017

By default the EE “secure forms” mode will verify the IP address when it checks the hidden XID value. You could try disabling “Process form data in Secure Mode?” (under Admin > Security & Privacy > Security & Sessions).

Of course ideally EllisLab would treat this as a BUG and stop checking the IP address. Locking sessions to an IP address should be OFF by default, with an option to enable it. I’m currently on mobile broadband and my IP address seems to be changing every couple of requests (probably a transparent proxy), which basically means I’m unable to log into any ExpressionEngine site, which is driving me crazy.

Come on team, we’re not running banking software here, this is a CMS! Even most internet banking platforms don’t tie sessions to an IP address.

To illustrate my point, I had to submit the “post reply” form 5 times just then to get my post to submit (because my IP address is changing each request, from a pool of about 4 it seems).

Hey Luke,

Adrian’s right about the cause behind your users being unable to submit content. And he’s right that this is something our dev team needs to take a deeper look at, and in fact, they’re doing that right now. There are actually a few issues right now that are affected how EE treats IP addresses and how it uses them for security. I will make sure to pass both your posts to the team so that it can help inform their decisions on what to do.

Thanks again for the input, and I mean that sincerely. We really are using your input to help guide the discussion on this.

Thanks Kevin, appreciate the response. Look forward to seeing a fix for this in future.

Hey Adrian,

Thanks again for your input.

If you need anything else, please let us know by opening a new thread.

Cheers,