My users receive emails with deep-links to pages.
Although the ip_login settings are set correctly, and they have access rights to the emailed link, an "access denied" page is generated - they are not automaticaly logged in. The work-around for the user is to a) press F5 (a lesser known tactic) of b) click the link again.
Normally, the login-block is on screen, but not in this case, so the "Log in automatically" link is not visible.
The problem is in login.module file, the variable LOGIN_AS_DIFFERENT_USER .
In function ip_login_user_logout(), this is set in $_SESSION and $_COOKIE with some experimental code.
In function ip_login_boot(), the variable is tested, and as a result: // user logged out, <...> so wait for user action.
I think there is some problem with FALSE, TRUE, 'not set', is_null ...
| Comment | File | Size | Author |
|---|---|---|---|
| #4 | ip_login_1444086_4_deeplink.patch | 2.3 KB | johnv |
| #3 | ip_login_1444086_deeplink.patch | 1.96 KB | johnv |
Comments
Comment #1
EJG commented+ 1
Comment #2
jim kirkpatrick commentedI'm flat out right now with work but will be happy to accept patches against D6 or D7 dev branches.
Comment #3
johnvAttached patch does some code cleanup, but does not resolve the issue yet.
Ths following errors appear when using the link www.example.com/admin/reports/dblog:
It seems that the user_access() call (or some other access-call) is done with old privileges/user, although the reported user is OK.
Comment #4
johnvThis patch resolves the problem.
Somewhere in the login-process, the required page is not reached. The patch adds a drupal_goto() statement.
It also cleans up the cookie-setting.
Comment #5
jim kirkpatrick commentedPatch looks good, committed to D7 dev... thanks John V: Commit 35d2aa7.
Needs D6 version port, will apply after testing in DEV on D7.
Comment #6
jim kirkpatrick commentedComment #7
jim kirkpatrick commentedNow applied to 6.x-2.0-dev.