HTTPS installed, now losing sessions - Joomla! Forum - community, help and support
hi,
i hope right place post - it's sort-of security problem. have apache 2.4 , joomla 3.6.4 , have installed ssl certificate , enabled "force entire site" https.
now logins backend administrator or superuser terminated @ random intervals , user thrown login screen. effect doesn't seem linked particular menu item/function or duration, though happens less minute after logging in.
session lifetime set 60 minutes, session handler "database" in control panel (global configuration).
i've added lines .htaccess in document root:
rewriteengine on
rewritecond %{https} off
rewriterule .* https://%{http_host}%{request_uri} [l,r=301]
which should throw http requests https redirects browser.
any ideas ? being logged out dozens of times in admin session *really* irritating, when large numbers of orders need manually entered.
thanks help,
david
i hope right place post - it's sort-of security problem. have apache 2.4 , joomla 3.6.4 , have installed ssl certificate , enabled "force entire site" https.
now logins backend administrator or superuser terminated @ random intervals , user thrown login screen. effect doesn't seem linked particular menu item/function or duration, though happens less minute after logging in.
session lifetime set 60 minutes, session handler "database" in control panel (global configuration).
i've added lines .htaccess in document root:
rewriteengine on
rewritecond %{https} off
rewriterule .* https://%{http_host}%{request_uri} [l,r=301]
which should throw http requests https redirects browser.
any ideas ? being logged out dozens of times in admin session *really* irritating, when large numbers of orders need manually entered.
thanks help,
david
by chance have running on cdn cloudflare?
then make sure /administrator/ folder excluded.
then make sure /administrator/ folder excluded.
Comments
Post a Comment