Thread

Y’all,

Thank you in advance for the help.

I have recently setup a SSL Certificate and all the pages on the site display appropriately. The site urls are set with https and all the links work. The entire site is running under https.

Logging in to the Control Panel works fine and shows me logged in to the public site. As identified by logged_out conditionals and screen name displayed.

But, using the Member Login Form does not log me in. I am redirected appropriately. When viewing source the form displays the https redirect.

Any ideas? At a loss here.

{exp:member:login_form form_class="login" form_id="login" form_name="login" return="site/index"}
        
            <label>Username</label>

            <input type="text" name="username" value="" maxlength="32" size="25">
        
        
            <label>Password</label>

            <input type="password" name="password" value="" maxlength="32" size="25">
        
        {if auto_login}
                <input type="checkbox" name="auto_login" value="1"> Auto-login on future visits
        {/if}

        <input type="checkbox" name="anon" value="1" checked="checked"> Show my name in the online users list
        <input type="submit" name="submit" value="Submit"></p>
        <a href="http://{path=member/forgot_password}">Forgot your password?</a>
  {/exp:member:login_form}

Edit: (for update)

Public (Client) side login only works if I use Cookies only for Website Session Type. I am still required to login through the Control Panel. Member Login Form still does not work.

Ok, I have a solution to the problem. I went back and edited my htaccess and checked the redirect for the form.

BUT, now I can not logout of the site without getting an error. “You are not authorized to perform this action”.

Having trouble with this as I seem to jump from frying pan into skillet.

htaccess:

RewriteEngine On 
RewriteCond %{SERVER_PORT} 80 
RewriteRule ^(.*)$ <a href="https://www.example.com/$1">https://www.example.com/$1</a> [R,L]

Im not skilled with htaccess but as far I understand, you have to use port 443 to get to the secure side, not port 80.

Check out this: exp-resso.com

I have gone through the ex-presso link. Thank you. I made their suggested modification to htaccess, but still logout fails.
Right now, I am working around by just sending logout to the {site_url} which seems to be killing the session.