Vanilla 1 is no longer supported or maintained. If you need a copy, you can get it here.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.
Registration works in Firefox and Safari but not IE
edited February 2008 in Vanilla 1.0 Help
I have just updated from 1.1.2 to 1.1.4. All went well I thought, until new users discovered that they could register with IE but after registration, they cannot sign in. Something is not quite right...Safari and Firefox (both Win and Mac) work as they should... I have searched here for any similar problems but was unable to find a cure. Any ideas? Thanks!
This discussion has been closed.
By the way, interesting use of frames.
Posted: Saturday, 9 February 2008 at 7:48PM
I wonder if it's a cookie problem? (Thinking out loud)
Then again if it's all users experiencing the problem this is unlikely.
Logically it must be something on the server if it causes the problem to all IE users.
Perhaps re-install the relevant update files?
but have managed to painfully work it out for my version!
I am using Vanilla 1.1.4 and have to access it through a frameset. The frame is the key to the problem.
Frames is not something I have worked with for many many years - so was a bit out of the loop on the issues around them but here is what was happerening for me:
PROBLEM: Safari, Firefox, etc will accept "third-party"* cookies, where as IE6+ won't alow them unless the user has their security level set to low OR you have correct p3p * cert for your cookies - So what this means is because Vanilla sets cookies for it's user accounts, they are being set as third-party cookies through the frame and IE goes, no- I'm not allowed to accept you because I'm a stupid face - and you get kicked out of the login.
FIX: In the end I found a hack-saw way of breaking out of frames JUST for the login page and after they have logged in redirect them back into the frameset - this is due to jumping over servers (yes this whole project has been "fun") and having to maintain sessions on two servers with all sorts of junk - but that was how I got it to work and so far all good
I hope this helps you guys out there, totally did my head in till I stubbled on the answer by mistake.
will post again if I have any updates!
* if you generate a cookie through a frame - it's 3d-party, if you generate a cookie from one browser window - it's first-party. First -party = good.
* Doesn't sound like much fun to me...
I noticed he was using frames but didn't associate the problem with it.