meilershsag

OK, now I am feeling like I need to Venmo you a few bucks/tip you a ko-fi, because I have yet another question… you mentioned far above that people are staying logged in too long, and that has been a problem with the site since the very beginning. I can now log in first time every time, but if I log OUT, all hell breaks loose…

it looks like the authorization cookie does NOT get deleted when I log out, so if I immediately try to log back in, I can’t, but something is getting mangled because it shows me as logged in but gives the error that I don’t have access to that page.

How can I get these cookies to delete on log out, and where is the cookie duration set? I am aware there are tons of plugins that claim to manage this, but considering I already have 22 plugins, most of which are mandatory for the site, I do not want to add another. I want cookies to be deleted on logout, in case someone logs out and tries immediately to log back in – can someone try that and let me know what is going on? I already disabled cacheing in the wp-config and in the plugins.

• This reply was modified 4 years, 7 months ago by meilershsag.

OK, I rescued the site, I think. It was a mix of changing cache settings, rolling back BuddyPress 1 version, and removing some custom code.

Thanks so much for your help; I haven’t touched php in 10 years after I moved to C#/.NET and I’ve never worked on a WordPress site before, so this was invaluable.

I found all sorts of really hairy code (hard coding, assumptions, bad variable naming, etc.) that makes me feel not super great about the product, but it is what it is. At least it seems to be running now. Whew! Just have to remember to disable debug mode.

Unfortunately the site just reverted back to the previous behavior, could you check it again? Thanks so much for your help and guidance here, I essentially had this site dumped in my lap and am just trying to get it running and stable.

I am looking into the session issue now, I made no changes to cookie lifetime in any of my fixes so far.

For the site move I followed a detailed checklist, and I did update the database with the new URLs for Siteurl and Home. Those are consistent in the wp-config as well, and the site hosting settings.

I disabled the cache; I will check with GoDaddy to see if I can disable it in hosting as well.

OK, I disabled quite a few of the plugins above. I have narrowed down what is happening to a very specific behavior:

If I log in on the main page, which uses wp-login.php, the login works but is ignored by the page. If I hand-type in the URL /wp-admin/, whether the user is an admin or not, suddenly I am logged in. This is repeatable 100% of the time.

Also, logout does not work; the cookie stays in the browser cache, and trying to log in again, I am told I am already logged in.

Should I replace my wp-login.php file with a fresh copy? It does not look corrupted and there are no errors with file permissions or any PHP errors called out in the debug log in regards to wp-login.

Thanks so much for your reply. You were not able to register at all? That used to work.

Turning off plugins isn’t a long-term solution for me; as is the case with so many WP sites, the plugins are the site; we paid for a theme called WPLMS to set up an online course, and it is made of Vibe, BuddyPress and WPLMS plugins all tied together as a single unit; I can’t disable piecemeal.

Here is a list of the plugins on the site, do you see any that seem like offenders that could cause issues with login?

bbPress
BuddyPress
Database Browser
Gravity Forms
My Database Admin
Post SMTP
Query Monitor
Vibe Course Module
Vibe Custom Types
Vibe ShortCodes
WP101 Video Tutorials
WPLMS Assignments
WPLMS Customizer Plugin
WPLMS Dashboard
WPLMS EventOn
WPLMS Front End
WPLMS PDF Certificates

I will try a vanilla theme and see if that fixes the issue; at that point I have to contact GoDaddy hosting support, which I am not looking forward to as I often get some nice gentleman who is 3,500 miles away and has only recently acquired skills in English, which greatly hampers our conversation. ANY other suggestions for settings in wp-config, fixes to wp-login, etc. are greatly appreciated, I can code PHP if needed.