Modx logging out all manager users when performing any actions

I have used Modx on a number of projects over the past 3 years and have never encountered this problem before. When building the site on there server the 2 months prior to launch I never encountered the problem. About a week after I created 3 users and demonstrated to my client’s staff how to use the Manager to edit content etc... the manager system continues to log out all users (even my administrator role) whenever attempting to perform a task in the manager screen. Any help would be much appreciated.. I did find the following earlier reply to a thread about a year ago

“If this is some kind of clustered server setup, then what may be happening is that each time you request a page (such as when saving or otherwise moving around in the Manager) the request is being serviced by a different physical server, and it doesn’t have access to your session file, which is by default stored in the main /tmp folder, but on the first server you logged in to.

The best solution to this would be to specify the session_path in your .htaccess file to be somewhere in your web space. Unless your php is running as a cgi module and with suexec, you’ll need to have a world-writable folder to put the session files in. Even better would be to use database storage for the session, but that’s another story.”

Is this still relevent??? THANKS!!!

I don’t know if this will help you but I was messing with session variables in my modx site, and when I destroyed the session, it logged me out, so I had to change it to just remove the session variable that I had set, becuase modx uses quite a few it destroyed them all and thus logged me out.

I used Print_r ($_SESSION); to see all the session variables set.

It seems like for whatever reason its loosing the session variable’s

Thanks for the reply - can the host company be causing the session issue? or is this something that modx is causing?

I’m sure someone will post a better answer as I don’t really know enough to comment but try creating a file in the root of your site to check your php settings, normally you can look at this in the manager, but like you said it logs you out



save it as someting.php and run it

On my setup I have a section called session, or session support and its enabled, might be worth you checking that out

If its not enabled , and if you have access permission you can enable it in the php.ini file

Mind you it all depends on what os/platform you are running the whole show on.

I have to report that the issue was caused when register globals were turned off in the php.ini file. What can be changed so that the security issue dealing with register globals in php.ini and manager log in sessions can both function on the site.

Quote from: curiouspixel at Sep 24, 2008, 09:36 PM

I have to report that the issue was caused when register globals were turned off in the php.ini file. What can be changed so that the security issue dealing with register globals in php.ini and manager log in sessions can both function on the site.

Register globals should have no affect on this. Not sure what to tell you.

Still sounds to me like a badly configured cluster. As was explained before, when you log in the session file is stored in the /tmp folder of that server. The next page request, however, may not be handled by that same server, and the one that does catch your page request won’t have your session file in its /tmp folder. A properly configured cluster has one server assigned to always hold the /tmp folder as well as a few others, and all the other servers are configured to use that one for those folders.

Or do these people have cookies blocked or otherwise restricted for security reasons?