Wow, that 4.3.2 may be the problem.
I really just need to see the error.log file if possible, and if nothing obvious stands out, I may get you to turn debugging mode on, so we can see all PHP errors and get a ton of output showing what’s really going on.
UPDATE:
Bingo!
http://www.php.net/manual/en/function.session-regenerate-id.php -- I just added use of this function in the modUser class (core/model/modx/moduser.class.php) in the function addSessionContext(). It seems that this does not automatically reset the session cookie until 4.3.3. Try just commenting out the block of code that looks like this:
<?php
$oldSessionId= session_id();
session_regenerate_id();
//HACK: Removing the old session object from the database so it can't be hijacked.
if ($oldSession= $this->xpdo->getObject('modSession', array ('id' => $oldSessionId), false)) {
$oldSession->remove();
}
?> and see if that helps you get logged in.
I’ll likely be moving this hack, (cough) logic out of here and force the session handler to deal with it anyway.
MODX Staff
