Why is it that when i set ’session_cookie_secure’ in System Settings to YES, i can no longer log into the CMS?
Are you logging into the manager via https (as opposed to http) ?
lo9on.com
MODx Evolution/Revolution | Remote Desktop Training | Development
So when i set the session cookies to ’session_cookie_secure’ does that mean i now have to log in using https and not using http?
Setting [tt]session_cookie_secure[/tt] to [tt]true[/tt] will make the cookie available only if the page is accessed via SSL (https). So to answer your question, yes, you will need to maintain an SSL connection in order for the manager to be able to read your session cookie.
It’s not all that necessary to have this set as secure, since the session cookie contains just the session id. But if you feel you need the extra layer of security, by all means do so.
lo9on.com
MODx Evolution/Revolution | Remote Desktop Training | Development