Users Thrown Out From being Logged in

[supagene]

Some of my clients get thrown out from login. I can't figure out why. At first I thought that aol users have this problem and they do have this problem, but I also noticed others get the problem regardless of what browser they use. Any help would be useful. :thumbsup:

[Guest]

there is something in the osc knowledge base about it

 

Check IP Address

If set to True the clients IP address will be checked on every page request.

 

This setting can cause AOL customers to be unable to use your store.

[supagene]

there is something in the osc knowledge base about it

 

These are my new settings.

 

Session Directory /tmp

Force Cookie Use False

Check SSL Session ID False

Check User Agent False

Check IP Address False

Prevent Spider Sessions False

Recreate Session True

 

I also wanted to set

Force Cookie Use to True but when I do that then I get a 404 error when I go to account login and try to login. Any ideas or suggestions?

 

my configure.php contains these values at this time:

 

define('HTTP_SERVER', 'http://www.subdomain.com'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://www.rootdomain.com'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'www.subdomain.com');

define('HTTPS_COOKIE_DOMAIN', 'www.rootdomain.com');

define('HTTP_COOKIE_PATH', '/ecatalog/');

define('HTTPS_COOKIE_PATH', '/subdomaincom/ecatalog/');

define('DIR_WS_HTTP_CATALOG', '/ecatalog/');

define('DIR_WS_HTTPS_CATALOG', '/subdomincom/ecatalog/');

[Guest]

if you are with a shared SSL you need to leave "Force Cookie Use to False"

 

Also the last line of that configure file has the way the sessions are stored. Set it to mysql to store the sessions in your dbase.

[supagene]

if you are with a shared SSL you need to leave "Force Cookie Use to False"

 

Also the last line of that configure file has the way the sessions are stored. Set it to mysql to store the sessions in your dbase.

 

I have it set.

define('STORE_SESSIONS', 'mysql'); // leave empty '' for default handler or set to 'mysql'

 

I figured out after more testing that if If I set

Session Directory /tmp

Force Cookie Use True or False

Check SSL Session ID False

Check User Agent False

Check IP Address False

Prevent Spider Sessions False

Recreate Session False

 

Then the site works but has one problem. If a user adds contents to their cart and then goes to checkout, clicks to create new users, by the time he is finished it displayes nothing in the cart. If he logs out then all the contents becomes visible again. I'm not sure where the bug is.

[supagene]

Could this be because I have recover cart sales contrib 2.11 installed?

[♥Vger]

sub-domains should not have a www in them (if that entry is meant to signify a true subdomain):

 

define('HTTP_SERVER', 'http://sub.domain.com');

 

Vger

[supagene]

sub-domains should not have a www in them (if that entry is meant to signify a true subdomain):

 

define('HTTP_SERVER', 'http://sub.domain.com');

 

Vger

 

its not a true subdomain. It is a resellers account and I'm able to have something like this

 

ROOT Domain (rootdomain.com)

rootdomain.com/www/htdocs

 

Subdomain (subdomain.com)

rootdomain.com/www/htdocs/subdomaincom

 

So then I can access my cart either by going to

www.subdomain.com/cart

or

www.rootdomain.com/subdomaincom/cart

 

all users go to www.subdomain.com/cart to purchase their goods but when they reach SSL area they are directed to www.rootdomain.com/subdomaincom/cart because I only have one SSL Cert which is present for www.rootdomain.com only.

[Guest]

Not sure I follow you now

 

Then the site works but has one problem. If a user adds contents to their cart and then goes to checkout, clicks to create new users, by the time he is finished it displayes nothing in the cart. If he logs out then all the contents becomes visible again. I'm not sure where the bug is.

 

What you mean "clicks to create new users" ?? Create a new account? How about existing users do you see the same problem?

[supagene]

Not sure I follow you now

What you mean "clicks to create new users" ?? Create a new account? How about existing users do you see the same problem?

 

Existing users don't see this problem. Only new users see the problem.

[Guest]

Have you tried setting the Recreate Session to true? needs PHP >= 4.1