When I select:
User State:
Redirect authenticated users to HTTPS and redirect anonymous users to HTTP (with the exception of login/registration pages).
I get this error:
Settings.php is not setup correctly. With the current configuration of 443 Session module, the following lines must not be in settings.php.
if (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] != 'off') {
ini_set('session.cookie_secure', 1);
}
The "not" needs to be removed? This code does need to be in the settings.php according to the README.
| Comment | File | Size | Author |
|---|---|---|---|
| #2 | session443_wording_wrong_way_round_in_requirements_errors-1237634.patch | 1.66 KB | mcdruid |
Comments
Comment #1
dalinYeah there may be a few logic errors around these messages. However in your case this is the correct message. Whenever you are redirecting authenticated users to HTTPS you must have this code snippet in settings.php.
Comment #2
mcdruid commentedActually I think nelslynn's correct - the wording of the error messages is the wrong way round in the current dev release.
So with:
[cookie_secure_required] => 1
[cookie_secure] => 0
...the message displayed is "Settings.php is not setup correctly. With the current configuration of 443 Session module, the following lines must not be in settings.php."
I think the word "not" simply needs to be swapped over, as per the attached patch.
Comment #3
dalinAh I see, I thought you were talking about the other "not".