https redirect login problem
 

In the back end I have this:

My forum url is : https://www.XXXXXXXXXXXXXXXXX

Home Page URL is: https://www.XXXXXXXXXXXx

Both are exact.

However, I noticed when I just put www.XXXXXXXXXXXXX in the browser it goes to my index page like normal. However, when I tried to login, I would get a redirect error.

I changed the forum url to: http://www.XXXXXXXXXXXXXXXXXXX

and it seems to work now, as far as logging in. Was this correct to do, should I do something else? Thanks!

Perhaps this may help.

ACP --> Settings --> Options --> Site Name / URL / Contact Details --> Redirect Domain Whitelist --> enter erroring URL (no / at the end).

Have you added https redirects into .htaccess yet?

You'll probably want these lines:

Replace yoursite with your website URL. Switch your forum URLs back to https://www.

Try logging in now

--------------- Added [DATE]1381800610[/DATE] at [TIME]1381800610[/TIME] ---------------

Edit, ozzy's answer is the right one. Oops!!

Yours may work also, I just am not that familiar with htaccess rewrites.

Ok, I changed my htaccess should I change it back - take off what you said? Or leave it? Thanks. cause now I'm getting this:

https://www.XXXXXXXXXXXXXXXX.com/default.asp?r=

--------------- Added [DATE]1381801081[/DATE] at [TIME]1381801081[/TIME] ---------------

Well, I'm not sure what to put, because this is the error URL, which has a "/" at the end...

Invalid Redirect URL (https://www.XXXXXXXXX.com/)

--------------- Added [DATE]1381801186[/DATE] at [TIME]1381801186[/TIME] ---------------

Still getting the redirect error, even after doing what Ozzy said...

Ok, try adding the / at the end, that may work.

Nope, didnt work...

Weird if the forum url is http and the home page url is https I have no issues. Should it be that way, what exactly is the difference and should I be concerned about changing something else to get it to work? Thanks.

If you want to use HTTPS, then you should consistently use HTTPS (in the forum URL and homepage URL - same with www). This will just take some tweaking, but we'll get there :) Can you copy the exact redirect error you're getting?

Ok wait for someone more familiar with this type of thing then, sorry I could not be of more help. :(

Ok, I tried whynopadlock.com and got this error for the login page:

ERROR: The secure URL you submitted was redirected to:
http://www.XXXXXXX.com/forum.php

Please try pasting the secure URL you originally submitted into a new web browser window to make sure it stays on the secure page. Your secure page may require there to be items in a shopping cart, or for the user to be logged in. It may not be possible to test this URL.

Secure URL submitted: https://www.XXXXXXXXXXXX.com/login.php?do=login

On Whynopadlock, you need to run it without the querystring - just https://www.yoursite.com/login.php

Ok, what I did is left the home url and forum url back to https[sitename]. I changed the white list to http[sitename] and it seems to work...

Awesome! Now if you type in http://www.yoursite.com - does it automatically go to HTTPS for you? What if you type in http://yoursite.com (no www)

If I type in http I get this:

http://www.XXXXXXXXXXXXXX.com/


if I do no www I get this:

http://XXXXXXX.com/


So what do I do now????? Thanks

--------------- Added [DATE]1381802451[/DATE] at [TIME]1381802451[/TIME] ---------------

SHould I try your redirect again?

--------------- Added [DATE]1381802564[/DATE] at [TIME]1381802564[/TIME] ---------------

Ok, tried your htaccess again and it threw an internal error when logging off... had to remove it...

Maybe if you give us your real url we can see it for or selfs

XXXXXXXXXXXX

That htaccess file should not be causing any errors. Do you have other rewrite rules in there?

Try just this part. Needs to go at the very end:

(No changes needed there. Leave exactly as is)

Let me know when you do this, so I can try loading your site again.

Here is my rewrite:

...

#RewriteCond %{HTTP_HOST} !^www.XXXXXXXXXXXXX.com$ [NC]
#RewriteRule ^(.*)$ https://www.XXXXXXXXXXXXXXXX.com/$1 [R=301,L]

#RewriteCond %{HTTPS} off
#RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}


I commented out yours... until I get it fixed...

--------------- Added [DATE]1381803782[/DATE] at [TIME]1381803782[/TIME] ---------------

Ok, made the changes...

OH no wonder this blew up!! Yeah, we need to get it to play friendly with the rest of your rules :)

First of all, I don't see any rewrite here sending non-www traffic to www. I just checked, and I can go to the non-www version of your site, which could cause all sorts of cookie problems.

Could you try uncommenting this line and putting it up top, right below Rewrite Engine On

The www redirect really should be your first rule. If that works, then we can integrate the HTTPS rule too. Let me know

Ok, changed it.

Great! Check out http://gunsgrubandgold.com now

It goes to https://www.gunsgrubandgold.com for me :)

Last one that still isn't working:

http://www.gunsgrubandgold.com does not go to https.

At the very, very end of your .htaccess, could you uncomment this:

ok changed it

--------------- Added [DATE]1381804476[/DATE] at [TIME]1381804476[/TIME] ---------------

Looks like it blew up...

Alright, got the error - let's uncomment again. Let me figure out what it's clashing with.

Will post back in a sec- Thanks!

Ok, Thanks!!! Will be waiting... ;)

Could you try putting this at the bottom of .htaccess?

--------------- Added [DATE]1381805596[/DATE] at [TIME]1381805596[/TIME] ---------------

If that one doesn't work, try this one instead. Put it up top, right beneath our other top rule

Going to bed now - good luck, you're almost there! In the end, every one of the
following URLs should be going to https://www.gunsgrubandgold.com:

https://www.gunsgrubandgold.com
http://gunsgrubandgold.com
https://gunsgrubandgold.com
http://www.gunsgrubandgold.com

So far, we've got all but that last one :)

Thanks. The last one still does not redirect to https... thx Here is the htaccess:

RewriteEngine on

RewriteCond %{HTTP_HOST} !^www.XXXXXXXXXXXXX.com$ [NC]
RewriteRule ^(.*)$ https://www.XXXXXXXXXXXXXX.com/$1 [R=301,L]

RewriteEngine on

RewriteCond %{HTTP_HOST} http://www.XXXXXXXXXX.com$ [NC]
RewriteRule ^(.*)$ https://www.XXXXXXXXXXXXXXXXX.com/$1 [R=301,L]

Redirects for me! Try in an incognito tab, so nothing is cached. I think you are good to go :) Click this one:

http://www.gunsgrubandgold.com

--------------- Added [DATE]1381806594[/DATE] at [TIME]1381806594[/TIME] ---------------

Oops, it was working a second ago - back to http now. Did you change anything recently?

Yea, damn, what should I change back the first or the second?

Just try each of these (individually)

https://vborg.vbsupport.ru/showpost....4&postcount=25

Save .htaccess, then click this link:

http://www.gunsgrubandgold.com

One of them was properly redirecting that to https

I got it! I added this under the first rule:

RewriteCond %{SERVER_PORT} !443
RewriteRule (.*) https://www.gunsgrubandgold.com [R=301,L]

Does it work for you now?

--------------- Added [DATE]1381806956[/DATE] at [TIME]1381806956[/TIME] ---------------

Thanks! I think that fixed the redirect error when logging in when I would put www.gunsgrubandgold.com in the browser

--------------- Added [DATE]1381806996[/DATE] at [TIME]1381806996[/TIME] ---------------

Please confirm that t works. The reason I was asking is should I go through this post and delete the htaccess info, is it a security risk? Thanks.

Nice!! All link combinations redirecting to https://www for me now :)

Good work, your site looks great!

Thank you!!!! Should I be concerned about the htaccess stuff I posted here? Or not really... thanks again!!!

I don't see anything worrisome in there (IP blocks or password restrictions), but it couldn't hurt to edit out the posts that include your entire .htaccess file.

Goodnight!

Thanks bro! Have a good evening...

Yes seems to work now but your site is very slow at loading you need to do something with that

Do you know why it is slow? I'm on a shared host, could that be the issue? Any help appreciated. Thanks.

I would talk to your host see what they can do also try these
https://vborg.vbsupport.ru/showthread.php?t=259302
https://vborg.vbsupport.ru/showthread.php?t=284816

Your 'forumhome' page is 4.3m, that is a pretty large page to load. I would suggest optimizing some of your images.

Nice looking site. :)

Thanks. Where can I find out, like you did, the page size? I think its my background I added, can't seem to get it any smaller (file size)... Thanks.

--------------- Added [DATE]1381875350[/DATE] at [TIME]1381875350[/TIME] ---------------

Thanks! I installed them. Do you see any noticeable difference? Thanks again!

Guys

I need your help.

Today I have added SSL so now my site to moving to https

Issue:

When I login admin in home page and Then I go to Sub-forum THEN issue coming which is admin login is moved to unregistered user.