After we activated Captcha in the settings we cannot log in the backend of our revo-installation anymore. The displayed error is: "$_SESSION Variable not set".
Does anybody now the reason of this problem and how we can log in again?
-
MODX Staff
- 10,725 Posts
There is no Captcha in MODX Revolution core. You’ll have to elaborate...
Hello,
Could resolve your issue, I have the same problem
No. Unfortunately not. We have no idea how to find the problem. Did you meanwhile solve the problem?
Did you install the Captcha plugin?
Yes. Captcha 3.2.4 beta1.
Captcha sets a $_SESSION variable with the correct answer when it creates the image.
When the user logs in, Captcha steps in again and checks the user's input against the $_SESSION variable. If the $_SESSION variable is not available, it prints the error message you're seeing.
PHP sessions cookies are identified by a domain and path; so they are only valid for the path specified, and scripts in each path that have a session cookie are in control of their own unique session data.
So if the user gets redirected to another domain (e.g., www.mysite.com versus mysite.com), the session data will be unavailable.
Do you have any plugins that might be changing the URL? Your .htaccess file might also be a factor.
Hi Bob,
for test-reasons I now disabled all our plugins step by step and I uninstalled and re-installed the captcha-plugin but without any success.
Maybe there is anything wrong in our php settings?
The phpinfo shows this:
gd
GD Support enabled
GD Version bundled (2.0.34 compatible)
FreeType Support enabled
FreeType Linkage with freetype
FreeType Version 2.3.7
T1Lib Support enabled
GIF Read Support enabled
GIF Create Support enabled
JPG Support enabled
PNG Support enabled
WBMP Support enabled
XBM Support enabled
Is there maybe anything missing?
If you're seeing the Captcha image, those options shouldn't be a factor (and they look fine to me). I think it's definitely a sessions issue. I'm not much of an expert on session handling so maybe someone else can suggest what to check next.
You might try renaming .htaccess and turning FURLs off in System Settings to see if that makes a difference.
OK. Thanks for this idea. I renamed the .htaccess and turned off the FURLs but it made no difference. Would be great if anybody has another idea what I could figure out to check what is wrong concerning our session handling...
