When the secure pages module is enabled with Drupal 4.6.5, loging in no loner works. User (including user 1-- admin) is given an "unrecognized username or passwordr" message. Any ideas??

Thanks for the help.

Comments

bomarmonk’s picture

bomarmonk commented

I have confirmed that this has something to do with Secure Pages: after manually disabling secure pages through phpMyAdmin, I could once again log into my site. Enabling it again produced the same problem. Any solution would be appreciated.

gordon’s picture

gordon commented

I have checked it here, and I am having no issues.

Have you altered your settings.php so that https pages work on 4.6?

You need to change the url to include https when you are on a https page.

if ($_SERVER['HTTPS']) {
  $url = "https://example.com"
}
else {
  $url = "http://example.com";
}
bomarmonk’s picture

bomarmonk commented
Status: Active » Fixed

That did it. Thanks!

bomarmonk’s picture

bomarmonk commented
Status: Fixed » Active

I'm changing this back to active after the login process suddenly stopped functioning properly. I'm not sure what is happening here, but after a period of time where secure logins actually seemed to work fine, the module suddenly prevented successful logins. After entering a user name and password, another user name was returned in the login window (of a remote user somewhere out in the world-- a real person who perhaps just created a new account). I think that, no matter what I typed in as the user name, the login thought I was trying to login as this person.

Once I turned the secure pages module off, logins functioned normally again. I have now included the propert settings for https urls, as described in this link (which seemed to make things work for awhile). Perhaps, something that caused this bug to be triggered: I recently suspended users from creating new accounts on this site. Maybe this behavior is a result of the above mentioned user trying to create an account when this ability is disabled-- then secure pages somehow doesn't allow that failed account creation to clear? This is all speculation, but there is definitely some kind of bug here, or I still have some serious configuration issues. I hope someone can help track this down so that I can use this module. Thanks in advance.

mwu’s picture

mwu commented

any updates? I'm about to try secure pages.

bomarmonk’s picture

bomarmonk commented

I have secure pages running with Drupal 4.7, and so far there have been no problems. I'll post again if I encounter something unexpected or undesired.

gordon’s picture

gordon commented

This has been fixed in 4.7. If this is still an issue I will backport the fix to 4.6 as well.

See #82523

gordon’s picture

gordon commented
Status: Active » Fixed
Anonymous’s picture

(not verified) commented
Status: Fixed » Closed (fixed)