When I set Use Secure URLs in Admin to "yes" it causes the backend to logout everytime I view something on the front end. Does anyone know what could be causing this. The backend works fine until I browse the site proper ... then it logs me out.
-
1Can you use Google Chrome's debugger (or another tool) to show the cookies set on you site?– Alana StormApr 16, 2014 at 1:31
-
It sets 5 --utma, --utmb, --utmc, --utmz and adminhtml ... ( facebook also sets 2 datar and lu but I presume that's nothing to do with it)– byronyasgurApr 16, 2014 at 16:44
-
... it seems to be deleting the cookies and re-setting them every click on the front end ... I have no idea what could be causing this though– byronyasgurApr 16, 2014 at 17:00
1 Answer
Based on the comments above, it sounds like your Magento frontend isn't using the frontend
cookie for the PHP session. Instead it's using the adminhtml
cookie. for both the frontend and backend area. Because of this, when you browse to a frontend page the frontend session code is set in the adminhtml
session, and you lose your login.
This (most likely) happened because an extension you installed monkeyed around with the session/cookie setting code in your system, or someone working on the Magento system monkeyed directly with a core file. I wrote an article recently about a similar issue, instantiating session objects too early. Although your issue is different, that article provides some context around how/why Magento session and session cookies are named, and might help you debug this on your own.
Also, this may be as simple as your server time being set incorrectly and the cookies expiring early.
-
thanks ... well I don't think I touched any core files so I'll disable the extensions and see. Apr 16, 2014 at 18:22
-
@byronyasgur You'll also want to check that your cookie domain set in the backend matches your secure domain set in the backend. Apr 16, 2014 at 19:36
-
not sure about cookie domain - I put in my domain prefixed with a period as they said and it locked me out - had to fix via phpmyadmin - magentocommerce.com/wiki/modules_reference/english/… Apr 18, 2014 at 18:03
-
1Traced it back to Balke Store Maintenance ... great extension but apparently you need to set the "use secure in" for admin and front end to 'No' if you want to put the store in maintenance mode and not be logged out ... so it seems anyway. Apr 22, 2014 at 23:55
-
@byronyasgur Blarg — apologies if I sent you down the wrong path. Apr 23, 2014 at 5:21