Login, set up of cookie and mix of http and https

Hello,

On my site, the fact to be logged in phorum under http, allow to gain also access to some other parts of the site that are under https. It was working fine, until the last big update of Firefox, setting up cookies to lax by default. Doing so, the cookie are not readable anymore.

So, now, when i logged in under http, i can't go to the https part under Firefox (but it is still working with Chrome).

I did allowed to connect using login.php under https, thiking that it could be the solution, but it is not. it seems than in login.php it only allows a tmp cookie but not the final one that is set later ?

any idea to solve that ? or a bit of code to add ?

Thanks

Regards

Ultimately you will need to force https everywhere, or depend on the browser to upgrade http to https.

It can be forced in .htaccess or the Microsoft equivalent. You can go online to find the correct entries.

In the admin / General Settings / File/Path Settings --- HTTP Path , set it to https: // your site...

There is a MOD * Automatic HTTP Path: [www.phorum.org]
that may be of use.

Thanks Scott. Yes, i will need to have everything under https (this is a middle step having both parts right now)

Is the login process documented somewhere ?

By the way, i did a test under full forum under https... working fine under Chrome... but not under the latest release Firefox. seems the same issue with the way to set up cookies

(and https set up in admin)



Edited 1 time(s). Last edit at 01/14/2022 02:55PM by elmotard.

Look at login. php and user. php for further info.
Don't know if there is anything in the docs.

BTW you change domains if you go from https :// www. myforum. com to https :// myforum. com which will leave the cookie invalid.



Edited 1 time(s). Last edit at 01/14/2022 04:18PM by Scott Finegan.

Thanks... look into that direction with user.php