VB4.2.0 cookies session login issue

[postcd]

Hello,

on my 4.2.0 vbulletin i have long time issue with login system.

I login (no matter which browser) and it shows message thank you for login (redirection) and then is back on forum, but shows like non loged in. THen i refresh page and im loged in.

Or i logout, go to main page and i see myself still logged in..

Disable Plugin/Hook system from admin dont fix the issue. I tried this in Chromium and Firefox

please any idea how to debug cause?

[ozzy47]

Have you tried on a unmodified default style?
Have you tried with all mods disabled, via the config file?
What vB version and PHP version are you running?
Have you tried with a empty .htaccess file?

[postcd]

Originally Posted by ozzy47

Have you tried with a empty .htaccess file?

Thx, this must be the cause..

I have several caching rules in .htaccess


And issue is within these 2:

# 30 DAYS
<filesMatch ".(ico|pdf|flv|jpg|jpeg|png|gif|js|css|swf)$">
Header set Cache-Control "max-age=2592000, public"
</FilesMatch>

# 2 HOURS
<filesMatch ".(php)$">
Header set Cache-Control "max-age=7200, must-revalidate"
</FilesMatch>

Pls anyone have idea what is wrong in them?

[ozzy47]

Did you remove them and the issue goes away? Note, you may need to clear your browser cache and cookies after making the changes.

[postcd]

Yes, it works without these two...

i did around 30 logins

and found these can be cached in vbulletin:
jpg|jpeg|png|gif|css|js


but if i cache php, html, i think its a problem in vbulletin, because the login form, the New topic, New reply buttons are cached not to be there, appears after page reload...

Not sure if developers can fix it anyhow, or there is any workaround to cache html etc and still have this working.


PS, these are OK to use:

# ETAG - By removing the ETag header, you disable caches and browsers from being able to validate files
Header unset ETag
FileETag None

# 7 DAYS
<filesMatch ".(jpg|jpeg|png|gif|css|js)$">
Header set Cache-Control "max-age=604800, public"
</FilesMatch>

<IfModule mod_expires.c>
# Enable expirations
ExpiresActive On
# My favicon
ExpiresByType image/x-icon "access plus 1 month"
# Images
ExpiresByType image/gif "access plus 1 month"
ExpiresByType image/png "access plus 1 month"
ExpiresByType image/jpg "access plus 1 month"
ExpiresByType image/jpeg "access plus 1 month"
# CSS
ExpiresByType text/css "access 1 month"
# Javascript
ExpiresByType application/javascript "access plus 1 month"
</IfModule>

[cellarius]

What sense is there in caching dynamic files (php) this way? They potentially look different for every user.