News:

Want to get involved in developing SMF, then why not lend a hand on our github!

Main Menu

Re: Session verification failed.

Started by Planet_Dust, May 18, 2020, 11:55:29 AM

Previous topic - Next topic

Planet_Dust

I have the same issue.
"Session verification failed. Please try logging out and back in again, and then try again."

It's a clean, fresh install of SMF 2.0.17.

Tried to clean smf_sessions table - didn't helped.

More interesting that other installation of SMF on this hosting is working fine, and the settings of web server and PHP exactly the same.

m4z

Quote from: Planet_Dust on May 18, 2020, 11:55:29 AM
I have the same issue.
"Session verification failed. Please try logging out and back in again, and then try again."

It's a clean, fresh install of SMF 2.0.17.

Then it's not the same problem, only the same error message; the other thread was about 2.0.15.
"Faith is what you have in things that don't exist."
--Homer Simpson

Es gibt hier im Forum ein deutsches Support-Board!

Doug Heffernan

Can you empty the session table, clear your cookies and give it another go?

Planet_Dust

Quote from: doug_ips on May 18, 2020, 12:50:17 PM
Can you empty the session table, clear your cookies and give it another go?
Just tried. Same thing.
Even tried change databaseSession_enable to 0 and files is creating properly in session directory.

m4z

Does the top left login area (instead of the "main" one in the center) work?
"Faith is what you have in things that don't exist."
--Homer Simpson

Es gibt hier im Forum ein deutsches Support-Board!

Planet_Dust

Quote from: m4z on May 18, 2020, 02:06:04 PM
Does the top left login area (instead of the "main" one in the center) work?
Yeah, if i clear browser cookies i can login with top left area.
But then, i can't logout, can't access admin panel with password check enabled, can't change a lot of settings, it's showing "Session verification failed" error.

m4z

Hmm. Can you try running repair_settings and see if it suggests any changes?
"Faith is what you have in things that don't exist."
--Homer Simpson

Es gibt hier im Forum ein deutsches Support-Board!

Planet_Dust

Quote from: m4z on May 18, 2020, 05:38:18 PM
Hmm. Can you try running repair_settings and see if it suggests any changes?
Done. Everything is fine.

m4z

So did it (help to) identify a problem? What was it?
"Faith is what you have in things that don't exist."
--Homer Simpson

Es gibt hier im Forum ein deutsches Support-Board!

Planet_Dust

Quote from: m4z on May 19, 2020, 02:58:24 AM
So did it (help to) identify a problem? What was it?
Nope. "Everything is fine" - was for "repair_settings" script. It did not find any critical errors.
The problem is persist.

Kindred

Слaва
Украинi

Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."


Kindred

you have got something VERY VERY wrong with your session generation.

confirm the following:
(what is your setting?)

Use database driven sessions
Enable local storage of cookies
Use subdomain independent cookies
Use basic cookie authentication
Слaва
Украинi

Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

Planet_Dust

Where i can check this in database?
I can't check cookie setting in Admin Panel.

Kindred

databaseSession_enable
databaseSession_loose
databaseSession_lifetime

globalCookies
Слaва
Украинi

Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

m4z

Are you using the default theme?
"Faith is what you have in things that don't exist."
--Homer Simpson

Es gibt hier im Forum ein deutsches Support-Board!

Planet_Dust

Quote from: Kindred on May 20, 2020, 02:23:44 PM
databaseSession_enable
databaseSession_loose
databaseSession_lifetime

globalCookies

databaseSession_enable - 1
databaseSession_loose - 1
databaseSession_lifetime - 2880
globalCookies - Not found

Quote from: m4z on May 20, 2020, 04:06:08 PM
Are you using the default theme?
Yes. No changes were made. it's clean just installed forum.

m4z

The URL you shared above uses HTTP. Do you use HTTP or HTTPS when trying to login? (And what did you use when running repair_settings?)
"Faith is what you have in things that don't exist."
--Homer Simpson

Es gibt hier im Forum ein deutsches Support-Board!

Kindred

honeslty, I think the issue might be at the server level.

The way that sessions are added to the URL indicates a problem, I think -- because the session ID changes with every page load
Слaва
Украинi

Please do not PM, IM or Email me with support questions.  You will get better and faster responses in the support boards.  Thank you.

"Loki is not evil, although he is certainly not a force for good. Loki is... complicated."

Planet_Dust

Quote from: m4z on May 21, 2020, 12:26:11 PM
The URL you shared above uses HTTP. Do you use HTTP or HTTPS when trying to login? (And what did you use when running repair_settings?)
This vhost is using only HTTP. I've installed this instance of forum for testing purposes (to make a clean install and rework theme template of a production forum, some kind of reference to a fresh install to clean production DB, to resolve and clean some trash code and DB tables of production, etc).

Production forum is - https://forum.thechembase.com [nofollow]

First install was 2.0.10 in 2015, and then time to time it was updated to version 2.0.17 for now.
Server software was also updated time to time. PHP 5.6 to 7.0, 7.0 to 7.1, 7.1 to 7.2.
Now it's Apache 2.4.43 (event MPM), PHP 7.2.31 (fpm proxied to apache), MySQL 5.7.30.

Quote from: Kindred on May 21, 2020, 12:36:09 PM
honeslty, I think the issue might be at the server level.
But production forum using absolutely same software and absolutely same settings of Apache, PHP and MySQL. Except for HTTPS.

Advertisement: