• The move to the new server is done. There are some software and database maintenance updates in process. This has us passing the hat around to help out. We appreciate any donations. Seriously, even a dollar helps. The payment page may be found here - https://www.audiokarma.org/support.html

Log out, log in anomaly - change bookm@rk to https

If your on HTTPS to begin with you will stay HTTPS for that session.....

I dont know why you guys are having so many problems....

If you login to the HTTPS side you should stay logged in ON THAT SESSION (If you stay using HTTPS links)

A couple other sites im on also have shared HTTP/HTTPS and they dont have these issues....

cellar.org (You can goto http or https when there) - VBB

hipforums.com/forum (Same thing) - Xenforo

I havent seen anyone report these issues on either of those sites and both allow both......

Im so sorry everyone......
 
8B9856B9-B97A-44DD-891E-275EF262C8F7.jpeg


^ that’s what I get using the watched threads link.
There seems to be a redirection in place directing front page traffic to https://audiokarma.org (for all four combinations of http(s) + w/ or w/o www.).

But there does not seem to be site wide redirection for all sub pages to the above domain, and problems emerge w/ bookmarks and direct links to content.

For example this link should but it does not automatically redirect to https://audiokarma.org:
http://www.audiokarma.org/forums/index.php?watched/threads
 
Im curious is anyone here on hipforums or cellar.org??

Im curious if the people having problems HERE have problems on hipforums also??
 
I've been having the same issue. Firefox (latest) in WindBlows 10. Just now I activated an extension called "https everywhere" and it forces a redirect to the https page(s) and I stayed logged in (so far), even clicking on "Home". Without it I get "logged out" quite often. I haven't tried anything on my Android phone yet though.
 
Just thinking from my experiences. When people get logged out, if you hit the browsers back button/arrow/whatever are you logged back in ? I always get logged back in if I hit a link, the new page logs me out and I go back.

Seems it's been years that links to the forum from threads here in the forum have logged me out. I think these open a new tab also.
 
Same here, getting logged out constantly . Every time I try to edit a thread i have to log in, then I try to hit edit again and I logged out. So basically from this Mac I can not edit any threads of mine.

Ugh !!!

I'm using Safari Version 12.1 (13607.1.40.1.5) Just updated in hope it fix this.

My old leopard OS works fine, as does firefox and chrome.

EDIT: WTF? here I am able to edit. let me go to the Solid state forum and see if I can edit posts there or if it will long me out.

EDIT #2 : well i can't edit posts any where but this forum or it loges me out and no matter how many times I log in and I hit edit in on one of my posts I get logged out every time I try.

Nashou
 
Well change back to HTTP my friend,there isnt really any reason to worry of using HTTPS here....

I am trying to help you.......
 
Last edited:
It's gotten worse on my Ipad over the past few days. Logs me out constantly for a while. They all of a sudden it starts to work again. I do nothing, other than re-log in each time. Can take 5-6 times before it settles down.
 
Thank you for the update sir. I'm sure you have been painstakingly working at a solution and it's much appreciated!
 
I’m having the same issues as I had before: everything is fine but then I click a thread and I’m logged out. I can go “back” and be logged back in but then as soon as I click on any other thread I’m logged out
 
You've 301 for the base URLs:

Code:
JPs-iMac-Pro:~ jjones$ curl -I http://www.audiokarma.org
HTTP/1.1 301 Moved Permanently
Date: Wed, 03 Apr 2019 10:41:14 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Location: https://www.audiokarma.org/
Vary: Accept-Encoding
Content-Type: text/html; charset=iso-8859-1

Code:
JPs-iMac-Pro:~ jjones$ curl -I http://audiokarma.org
HTTP/1.1 301 Moved Permanently
Date: Wed, 03 Apr 2019 10:41:43 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Location: https://audiokarma.org/
Vary: Accept-Encoding
Content-Type: text/html; charset=iso-8859-1

But not for anything else:

Code:
JPs-iMac-Pro:~ jjones$ curl -I http://www.audiokarma.org/forums/index.php?threads/log-out-log-in-anomaly-change-bookm-rk-to-https.857826/page-17#post-12611210
HTTP/1.1 200 OK
Date: Wed, 03 Apr 2019 10:43:48 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-control: private, max-age=0
Set-Cookie: xf_session=a9998b69f3b3b89b634f2b094905927e; path=/; httponly
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-Xss-Protection: 1
Last-Modified: Wed, 03 Apr 2019 10:43:48 GMT
Content-Length: 30830
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Type: text/html; charset=UTF-8

Code:
JPs-iMac-Pro:~ jjones$ curl -I http://audiokarma.org/forums/index.php?threads/log-out-log-in-anomaly-change-bookm-rk-to-https.857826/page-17#post-12611210
HTTP/1.1 200 OK
Date: Wed, 03 Apr 2019 10:44:35 GMT
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-control: private, max-age=0
Set-Cookie: xf_session=cd4108e9ac469d8357af91d1fd6e11e9; path=/; httponly
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
X-Xss-Protection: 1
Last-Modified: Wed, 03 Apr 2019 10:44:35 GMT
Content-Length: 30762
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Type: text/html; charset=UTF-8

You're also not rewriting http(s)://www.audiokarma.org/ to https://audiokarma.org/ (assuming XenForo home is audiokarma.org), which means at best you'll go from four auth cookie scopes to two.
 
Whatever was just done did not fix my original issue, but my posted workaround still works.

Rich P
 
Last edited:
Code has been added on the server site to force https. Let us know how it goes.

Just saw this post, during my daily "guest reading",,, I logged in with W10/FF,,, and noticed FF still sees this site as semi-secure (gray padlock and gold triangle)...
However I am able to change pages without getting logged off, so far,,, so I'll move around and see if it stays stable... I will delete all the AK history from FF after the session until I can see AK is fully secure...
Thanks for reporting this update,,, hope we can get the happy green padlock back!!!!!
 
Back
Top Bottom