Posted by sergserv on June 3, 2007 at 4:51pm
Jump to:
| Project: | Secure Login |
| Version: | 5.x-1.x-dev |
| Component: | Code |
| Category: | bug report |
| Priority: | normal |
| Assigned: | avf |
| Status: | closed (fixed) |
Issue Summary
I tried to install the module, but found that it does not work for example.com/user authentication. The thing is that I don not have a user login form on my site, it is turned off. If anyone needs authentication he should go to example.com/user/.
Comments
#1
This should work now.
#2
#3
I do not see it is working.
1. If I enable the "Login block" and type in it a username and a password then I see the redirection to the https://sitename. However, if I use sitename/user for logging in then there is nothing happens.
2. After authorization using the "Login block" the whole site keeps running through https://, that does not seem right.
#4
It does work if you use the HEAD version. I've fixed it, but screwed up the tagging when I was trying to commit the change... I'm still trying to figure this out.
#5
The version you can download still doesn't work, but it's an easy fix.
To make this work for /user logins, insert:
<?php|| ($form_id == 'user_login' && variable_get('securelogin_loginform', TRUE) == TRUE)
?>
after line 87 in securelogin.module.
#6
Yes, this secure login works for me.
When i login to the site with http://www.abh.com after login. i got redirected to https://www.abc.com
But for this u need to have valid ssl certificate and need to make one change in sites/defaults/setting.php
Just remove comment from $base_url and give ur sites's https url
:)
#7
sergserv, have you solved the problem, or Nick Urban, have you tried your small code change?
I believe I am in the same situation of sergserv. I turn off the login block. I follow what Nick Urban said to change the code. But /user or /user/register does not work.
When you hover over the login button in "http://example.com/user", you see it will be redirected to "https://example.com/user". However nothing happens after you click the button. same happens to "http://example.com/user/register".
If there is no https redirection, everything works just fine.
#8
The fix on comment #5 work, but you don't see a https on the /user page anyway the form is https protected. I know this ok for the security but the user don't know that and prefer a "yellow url" when he write a passwd ;).
#9
CVS is now fixed, so this should now be fixed.