Why does the CP (EE3) sometimes redirect to http://mysite.com/?S=0http://mysite.com/admin.php?/cp/
Development and Programming
Occasionally, the control panel will suddenly send me to the site with the protocol, site url and “S=0” all prepended in front of the actual URL. What causes this?
I have session type set to cookies only. Does that cause it? Why would this ever happen?
Hmm not sure! If you can find a way to reproduce it, we’ll take a look and see if we can fix it.
Hmm not sure! If you can find a way to reproduce it, we’ll take a look and see if we can fix it.
I believe it happens with this scenario:
- In one tab have a control panel page
- In a second tab also have a control panel page
- Allow your login to have a timeout
- While on one of the tabs, when it times out, re-login
- After logging in again and refreshing that page, go to the other tab and refresh that
Or it might be something else, but please try that.
BTW, I’m not the only who’s seen this:
https://support.ellislab.com/bugs/detail/14708/ http://expressionengine.stackexchange.com/questions/18141/s-0-in-urls-of-expressionengine-site https://devot-ee.com/add-ons/support/taxonomy/viewthread/9945
Also, this use claims this solves it (but I have not tried it): https://ellislab.com/forums/archive/viewthread/175297/#832254
The links you are referencing all deal with an empty session variable in the URL, i.e. S=0, which in some cases is correct, and in bug #14708 was fixed years ago. But I don’t see any reports where the protocol and domain are being repeated within the URL like your example. I don’t replicate but may have different session settings than you. What is your CP session type in Settings > Security & Privacy?
The links you are referencing all deal with an empty session variable in the URL, i.e. `S=0`, which in some cases is correct, and in bug #14708 was fixed years ago. But I don’t see any reports where the protocol and domain are being repeated within the URL like your example. I don’t replicate but may have different session settings than you. What is your `CP session type` in Settings > Security & Privacy?
Cookies Only.
What should it be?
Which setting you use is entirely up to you. Here is the documentation for the CP session type.
I’ll try your steps in a secondary browser today and see if I can get the same behavior.
Just touching base, I’m not replicating with those steps.
Just touching base, I’m not replicating with those steps.
It does happen rarely, but it’s occurred at least 4 times.
If you can find some reproducible steps I’ll be happy to try again. I’ve forced my timeout to a low value so I could test it with various settings and am never seeing any URLs being miswritten, nor the browser behaving in an unexpected manner.
If you can find some reproducible steps I’ll be happy to try again. I’ve forced my timeout to a low value so I could test it with various settings and am never seeing any URLs being miswritten, nor the browser behaving in an unexpected manner.
It happened again on a different server.
What happened:
- Had two tabs open to CP pages
- Eventually it timed out
- Logged back in on one tab and did some stuff
- Went to the other tab and refreshed it
That’s when it occurred.
Can you screenshot the bad URL for me? I feel like we must be miscommunicating; those are identical steps that I have performed.
Can you screenshot the bad URL for me? I feel like we must be miscommunicating; those are identical steps that I have performed.
The next time it occurs, I’ll do that
9 days later, I think I’ve replicated. There looks like there may be an issue with idle logout and “keep me logged in” in the control panel. Are you also selecting “keep me logged in”?
9 days later, I think I’ve replicated. There looks like there may be an issue with idle logout and “keep me logged in” in the control panel. Are you also selecting “keep me logged in”?
Yes, I also have that checked when I log in.
Please let me know if there’s some changes in idle timeout, etc that you want me to test.