Twitter social login not working with “loggedout” param in the URL

If it helps at all, this may be related to the issue solved in releases 7.8.17/18 in which some issue occurred with the LiveJournal login when “?loggedout=true” was in the query string (according to the Changelog in the plugin readme file).

Looks like this issue is also occurring when using Facebook to login, and who knows how many others.

It seems to be creating a conflict with the iThemes Security plugin “Hide Backend” feature that changes the WordPress login URL.

We can login from the link you mentioned above. See screencast https://www.dropbox.com/s/dw7rp8wk9e5a3oq/%20realestate.columbian.com.mp4?dl=0

In your screencast, you did not log out and try and log back in again. This is the scenario in which loggedout=true is in the URL. It will log in just fine when you initially log in, but when you log out and try to log back in again, it doesn’t redirect you to homepage.

See screencast: https://www.dropbox.com/s/60ja80fs5uus864/col-homes-login-issue-2018-04-25-09-02-56.webm?dl=0

Notice:
– the loggedout URL parameter after going back to the login screen after logging out (starting at :09)
– After I try logging back in after logging out, it autofills the username of the account I’ve just logged in using Twitter.
– After I clicked on the site logo to return to the home page, I click the user icon to show that I am in fact logged in; it just didn’t return me to the front page.

Okay. It seems because of the itsec-hb-token=userlogin added to the url. Try replacing existing wp-content/plugins/super-socializer/super_socializer.php at your website server with the one at following link:
https://gist.github.com/Heateor/3b5a7ccf6aa8db04555b13976cd01231

Thanks; I replaced the code in super_socializer.php with version you provided and the behavior is unfortunately the same.

If you drop an email at support[at]heateor[dot]com, we might be able to assess the situation.