Project:Secure Pages
Version:6.x-1.x-dev
Component:Documentation
Category:bug report
Priority:normal
Assigned:Unassigned
Status:closed (works as designed)

Issue Summary

I'm not sure if this is specific to mediatemple.com hosting or not..but the only other instance I've seen of this issue was on someone else with an MT server. This is a recommendation to pursue further and possibly add to the documentation.

When using securepages module on a mediatemple (gs) account, I was constantly being logged out and my shopping cart info lost (using ubercart) when moving between http and https (secure) connections. It wasn't keeping my session data when switching therefore I wasn't staying consistently logged in between the two connections.

The solution was to make sure I had a base_url defined in my settings.php file. Once I did that, everything worked as expected. Here's the link to the issue over on the ubercart forums of someone else who had the same issue.

My suggestion might be that this problem is reviewed and either documented or we find a definitive reason it's happening and a recommended solution.

Comments

#1

Status:active» closed (works as designed)

This is actually a know issue with drupal sessions being lost and the fact that the domains are not lined up.

You can either set the $base_url or set up the cookie_domain to be a wildcard for all subdomains. The later is usually used.

#2

this issue is driving me batty

#3

I have this issue as well, but it was not resolved by setting the base url. My http domain and my secure domain are different (but same site of course), as I'm running multisites and I have a wildcard certificate for the main domain. Each site then gets a secure subdomain which is installed with SSL and then points to its installation folder in the sites directory (using symlinks). Everything works fine except for the session being lost when the user switches between http and https

For example:

http://www.mydomain.com
https://mydomain.securedomain.com

I can't set the cookie domain because there's different domains

Is there any solution here?

#4

Thank you! This took me forever to figure out! Wish i would have stumbled across your post eight hours ago!