Hello,
I need a little guidance in where to look for code or a setting that didn’t upgrade nicely. Probably not an Ellis Lab bug, but something somewhere is acting up.
The site at http://www.unklesa.org was operating normally on 2.1.3 (non-comm) and I upgraded to 2.4.0 on a CentOs 5.x/PHP5.3.4 server. Everything pretty much worked as expected however I’m seeing an odd behaviour. With a jump like that, I may have missed a change to reflect in the templates, so please feel free to suggest whatever I may be able to check / test.
If I go to the ./member/login page, which loads a copy of the default profile them from a discrete profile page set, the page loads normally, however I see the message that “This page is only accessible to logged-in users with proper access privileges” just above the login form area. Submitting the form, the site redirects to the site top, and login is not performed. This happens on Safari, Firefox, Chrome, so it doesn’t appear to be a browser issue. Now, “member” is the trigger for the member profiles, and I do have a template section called Member, although if I change the trigger to “account” I have no change in behaviour.
If I go to the control panel, everything loads normally, and I can log in, and my login status is then reflected in the user accessible website.
I’ve looked through the upgrade changes, but nothing jumped out at me as an obvious change that I need to put into the templates, or change settings for in the CP. Can anyone suggest possible candidates - anything that changed the security for login forms on the Member module but not on CP, declaring forms other than {form_declaration} or options to go along with that, etc. I have tried changing User login to use Cookies only and also with Sessions only, with no change in outcome, but prefer to keep it on Sessions + Cookies.
The login form is generated with {form_declaration}.. .. </form>, generating the form in the page source as what appears to be normal:
<form id="member_login_form" method="post" action="http://www.mydomain.com/" >
<div class='hiddenFields'>
<input type="hidden" name="XID" value="4a9b45a7e4997b47333ea181d5fcbef04e56d82f" />
<input type="hidden" name="ACT" value="12" />
<input type="hidden" name="RET" value="-2" />
<input type="hidden" name="FROM" value="" />
<input type="hidden" name="site_id" value="1" />
</div>
.
.
<form stuff>
.
.
</form>
Any suggestions on things I should check/test??? Possible candidates or things to rule out?
I do have Freeform and some SAEFs in the site, with add-ons that include MX Notify, Hacksaw, HTTPS Support… Nothing there seems to cause this type of issue…
Any ideas on possible culprits, before I do a complete wipe/reinstall and spend buckets of time on this engagement?
Thanks,
James