SSL Login Redirect gets me Logged out.

[DaNIEL MeNTED]

Ok... I had our host install an SSL cert and modified the navbar so that the login form now submits to HTTPS://etc.... This redirects the login portion only to an SSL connection (when it redirects you back to the forum after logging in your back to HTML.

The only thing I'm finding is that now when I go back to the site it doesn't seem to get my cookie information and I need to login again ... even though I've checked "remember me".

Am I missing something obvious?

Hmm... If I check the cookie contents I see the following:

defperpage 12
cgssessionhash d6580b16edf31cc3b25e3508d3058330
cgslastvisit 1170886898
vbulletin_collapse
cgsreferrerid 0
cgsuserid 0
cgspassword
cgslastactivity 0
cgsthreadedmode
cgsstyleid 0
cgslanguageid 0

I'm going to assume that the userid and password in the cookie being blank are the problem...

And if I check the cookie information through SSL the userid and password are there...

So its forcing SSL for the userid/pass which is great - how do I get vb to read them when someone hits the forum?


HELP!

[Marco van Herwaarden]

You must run your entire vBulletin forum in either http or https. You can not mix them.

[DaNIEL MeNTED]

Well... frankly... thats unacceptible.

If the entire forum is behind SSL then any image any posts that's offsite will generate a message indicating there's mixed secure/insecure data and prompt them if its ok or not... totally useless and a crappy user experience.

I want to secure people's logins - based on what I'm finding I'm just going to have to have my members login when the SSL session expires.

FWIW I have it currently setup so their PMs are also SSL encrypted.