login sessions

Hi Jason

Odd problem, as our login procedure has been working fine since we did a revamp last January (and for years before that). However, things suddenly changed a couple of weeks ago - despite me not changing anything!

I'm using the standard WA login behaviour, but a colleague altered the page so that if a member was trying to access a restricted page, they were directed to the login page and then to the page they had originally requested (which is the way the standard DW login behaviour works, but I can't see how to do this with WA).

A 'normal' login creates about 8 Session variables. However, if someone logs in after trying to access a restricted page, as outlined above, only 3 Session variables are created.

I don't know if this change relates to an upgrade to Design extender (or the other big WA extension, which I also have recently installed)

Any thoughts? Can supply the page if it helps.

many thanks
Chris

on the login page, make sure the login pages form action uses the following code:

 action="<?php echo (htmlentities($_SERVER["PHP_SELF"], ENT_QUOTES)); ?><?php echo (isset($_SERVER["QUERY_STRING"]) && $_SERVER["QUERY_STRING"] != ""?"?".htmlentities($_SERVER["QUERY_STRING"], ENT_QUOTES):""); ?>"

  A 'normal' login creates about 8 Session variables. However, if someone logs in after trying to access a restricted page, as outlined above, only 3 Session variables are created.  

sounds to me like the redirect is going to a different login page than is used for a normal login.

go to the normal login page and make note of the full address in the address bar.

Then try visit the protected page and make note of the address in the address bar, are they the same?

if not, you will need to adjust the redirect location, and probably update the second login page so that it creates the same sessions as the Normal one.

Thanks Jason - but unfortunately, neither solution works!

Meanwhile, I have set various 'create session x if session x is missing' on the restricted page, so at least that solves the problem temporarily.

(BTW - have I missed something in the login behaviour to redirect to the previous page after login if access denied?)

Cheers
Chris

I have created a support ticket so we can look into this issue further.

To view and edit your support ticket, please log into your support history:
supporthistory.php

If anyone else is experiencing this same issue, please append to this thread.