Please upgrade here. These earlier versions are no longer being updated and have security issues.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.

[Github #1649] Misreporting status of signed in users

whu606whu606 I'm not a SuperHero; I just like wearing tights... MVP
edited August 2013 in Vanilla 2.0 - 2.8

Users appear not to be logged in, but refresh shows they are.

Vanilla version Version 2.1b1

I thought perhaps this was just on my forum, but it has now happened to me on, so it is presumably a wider issue.

It is frustrating, as it is not easily replicable: it is not related to a specific browser or browsers, or devices.


A user tries to sign in. On submission, either login appears to have failed, or it looks like they are not signed in on the page they are returned to. However, pressing F5 then shows them as logged in on the page.

Alternatively, following a link on the site will take them to the required page, but show them as logged out. Again, pressing F5 normally shows them as logged in again.

This just happened to me on - following the Questions link showed me as logged out again, pressing F5 sowed me as logged in.

Clearing the cache and cookies has resolved the issue for some users, and has sometimes led me to be able to replicate the issue.

It is not the case that there are dual instances of the forum running.


I reported the above on Github a couple of weeks ago.

I noticed this thread today:

and hoped it might be my answer, but alas, no.

This is the content of my .htaccess file

# Modified<br />
# If you modify this file then change the above line to: # Modified<br />

ExpiresActive on<br />
ExpiresDefault "access plus 30 days"<br />

Header unset ETag<br />
FileETag None<br />

AddOutputFilterByType DEFLATE text/html text/plain text/xml text/css application/javascript application/x-javascript application/rss+xml application/atom_xml text/javascript <br />
<IfModule mod_rewrite.c><br />
   RewriteEngine On<br />
   # Certain hosts may require the following line.<br />
   # If vanilla is in a subfolder then you need to specify it after the /. <br />
   # (ex. You put Vanilla in /forum so change the next line to: RewriteBase /forum)<br />
   # RewriteBase / <br />
 RewriteCond %{REQUEST_FILENAME} !-d<br />
RewriteCond %{REQUEST_FILENAME} !-f<br />
RewriteRule ^(.*)$ index.php\?p=$1 [QSA,L]<br />
</IfModule><br />

# Start rewrite. Do not Edit <br />
RewriteEngine On <br />
RewriteCond %{HTTP_HOST} ^ <br />
RewriteRule ^(.*)$ http://www.%{HTTP_HOST}/$1 [R=301,L] <br />
# End CloudFlare rewrite. 

I have no idea whether two lots of rewrite rules might cause such an issue.

If not, does anyone have any idea where I might start looking?

Not surprisingly, it is a gltich which is causing a lot my users frustration and confusion.



Sign In or Register to comment.