Constantly being Logged out via Forums

Marcus101RR

Marcus101RR

Master of Ravens
So,

Recently, When I leave the forums or switch on a link, I keep getting logged out. It also keeps stating I must login but sometimes shows me I am logged in. Someone please fix this...

SCREENSHOT:
oS9cMJ1.jpg
 
If you're logged in using one, then click on a link that uses the other, you will be logged out. This is a known issue that's been present since the start of the forums. It's the fact that some people post links using http and some using https.
 
As previously noted: this has been a known issue since the forum's beginning, there's likely some server configuration involved that's not handling the switch properly. It's on Skiph's list of 'things to look at in his spare time', and he has little spare time. He has looked into it before, and whatever it is, it isn't obvious to him.

Keeping to HTTP links for the forum seems to bypass the issue - this random logout hasn't happened for me since I stopped using HTTPS here. (HTTPS links to other sites posted on the forum don't seem to trigger this behavior.) Check your bookmarks, and check any browser plugins you might have that try to force HTTPS connections (e.g., 'HTTPS Everywhere') - either remove the plug-in or disable it for forums.terraria.org.

The Augmented TCF plugin for Chrome/Firefox seems to be very effective in preventing this as well, plus it adds some great QoL options.
(eta: I use this plugin, but I seem to have this option unchecked, so it's not this that is preventing the logout to happen to me.)
 
Last edited:
Sorry for the double post, but there is some new info about this.

It appears that an undocumented 'feature' of Xenforo is likely doing this. When a page with 'mixed content' from both external http and https is encountered, it tries to force the page link to one or the other. If there is no specific instruction as to which to use (via .htaccess rules), XF may do the 'safe' thing and log you out.

The solution seems to be to force links to one or the other, all the time, at the domain server level. Skiphs will investigate doing that when he has time; for now he's working through a long list of Terraria items that take priority. In the meantime, just avoiding HTTPS links on the forum seems to be the workaround.
 
i just installed the plugins , i want to know if this is safe for me to use , that it doesnt expose my computer to hackers when im surfing on other sites ?
 
You must log in or register to reply here.
Back
Top Bottom