Thread

Please help: I am running EE 1.6.9 Build: 20100430 and my client can’t log in - it keeps logging her off as well as other members.  It keeps redirecting them to them access denied template that I had created.

I’ve got User Session type set to Cookies and session ID, Allow Multiple Accounts Using the Same Email Address to No, Allow multiple log-ins from a single account to No, Require IP Address and User Agent for Login to No, Time Interval for Lockout to 1… any ideas?  This is a new one to me and there are active users on the site.

rapturestudio,

I sometimes get this on my sites as well. Typically for me I just flush my cache and all is good. Have you tried and gotten the same results? Have you tried another browser? Do you know what browser your client is using? From what information you have given I don’t see anything set-up wrong.

This just started happening to me as well (this morning).

I have not changed anything with respect to the EE software or admin control panel settings. I am using EE 1.7.

I’ve tried logging in with a separate user account that I have, and I get successfully logged in initially, but as soon as I try to visit any members-only page, I get redirected as if I was not logged in.

I did try cleaning all caches before testing.

Again, I haven’t changed any settings, so this is very puzzling.

This is a serious problem for me as their is an election coming up very soon!

This is happening to me too! Just started this morning. I cleared all caches (even though it boots me out many times before I can clear the cache). I’m running v. 1.6.9, build20100430.

Any ideas? This is bad!

By the way, this is happening in Firefox and IE.

I cleared all caches and switched to cookies only, but am waiting for the client to test for me, as I think this has to do with the hotel Wifi connection she was using (I have static IP here so can’t replicate her problem/the problem multiple members were also experiencing). This happened in IE8, IE9, Chrome, and Firefox. Doesn’t seem to be a browser issue - it seems to have to with dynamic IP and sessions (even if you have “Require IP Address and User Agent for Login?” set to “No”). Looking at our server logs on Plesk, it appeared that EE was getting royally confused at the IP switching (IP was changing every second) and it looked like it was also trying to assign the same session ID to multiple users… don’t know why but that’s what we saw.

I will follow up with how cookies only works to take care of the issue.

I’ve tried to access the site via multiple internet connections with no success. I essentially can’t access my CP (kicks me back to the login page at random) so I’m having a hard time playing around with settings.

brittanyA,

Try adding the following to your config.php file

$conf['cookie_domain'] = "";
$conf['cookie_path'] = "";
$conf['cookie_prefix'] = "";
$conf['admin_session_type'] = "c";
$conf['require_ip_for_login'] = "n";

John,

I assume that your response is specifically directed at brittanyA’s inability to access the CP.  Is that correct?

Can you comment on the original problem of users not staying logged in?

When I contacted EngineHosting (my host) they directed me to “you” (EE support).

Thanks for the help! Yes, changing to cookies only fixed the problem. Like Kernon, I would also like to know what prompted this so suddenly. Thanks again!

So far so good for me as well - changing to Cookies Only fixed it.  However, I do have a question: I had Session ID and Cookies selected specifically because I don’t want one user to share their login info with all their friends etc., allowing many people to utilize one paid account (we even had some potential members ask us why they have to buy a subscription for each member of their team - why can’t they just buy one membership and “share it”).  But I digress.  It seems that the trend of Wifi and other publicly shared access points for business travelers is not going to go away, and with that you have dynamic IPs for those access points, switching (sometimes frequently) between a block of IPs, and making Session IDs frustrating at best, and impossible to use at worst.  I did not have “Require IP Address and User Agent for Login” set to “Yes” but it seems that IP is still somehow tied to Session ID - either that, or there is some bug that was allowing EE to assign the same Session ID to multiple users, therefore not allowing them into the system.  What is our fix for those of us that travel, use public Wifi, have dynamic IPs that change frequently to still prevent more than one person from simultaneously logging and using EE with the same membership account?

I am not sure what would have caused this either. Is anyone still experiencing this after switching to Cookies Only?

John,

I assume that your response is specifically directed at brittanyA’s inability to access the CP.  Is that correct?

Can you comment on the original problem of users not staying logged in?

Hey Kernon—

Yep, John was making a suggestion specifically to brittanyA’s issue. It doesn’t look to me like the two issues are related.

Your test account as a member gets logged out on the front-end, but are you (or any other admins) having trouble staying logged in to the CP? Have you been able to draw a comparison between the ability to remain logged-in and a certain member group?

Just to make sure we’re troubleshooting with the same software, could I get you to upgrade ExpressionEngine to the latest version? Many times that alone is enough to fix the issue.

If that doesn’t work, try the other options for User Session Type and see if those make a difference.

I completely understand the urgency, so post back with an update and we’ll go from there.

I am not sure what would have caused this either. Is anyone still experiencing this after switching to Cookies Only?

No, cookies only worked me as well, but as others have indicated, we really don’t want to open up the possibility of members sharing their account access with others.

That’s my mistake, Kernon, I assumed you were still experiencing problems.

I’m going to have someone on our dev team look at this and get a better answer regarding not being able to use Session IDs. Thanks for your patience, everyone.

Kevin