Being logged off after searching admin site

[aeava]

Hi.

I'm hoping someone can help me out or point me in the right direction...

In the Admin section, I go to Customers -> Orders

There is an "Order ID:" labeled text-box in the upper right corner of the screen. This text box allows me to search the orders by just typing the Order ID.

The problem is, I type an order ID, press [Enter], and get sent back to the login screen to login AGAIN. The second time around, it works as intented: I type an order ID, press [Enter], and then it finds it.

Any thoughts? Anyone?


AEAVA.

[michael_s]

See the bugtracker, this may help:
205: not using osCAdminID while searching customers or categories - Bug Tracker - open source Commerce Maximized :: osCMax

[aeava]

Hi,

I commented out the lines listed in the bug tracker, but it didn't help.

Any other thoughts?

Thanks.

[michael_s]

I am not sure what it could be, as I cannot reproduce it on our development site. The searches work without any problems for me.

It is most likely the session is being dropped for some reason. Did you change the sessions settings in the admin by any chance?

[aeava]

I haven't changed anything on the admin side.

The weird thing is: I do any search (orders, customers) and I lose my session information. Then I can log back in and it works without problems...

??

[michael_s]

Try clearing all your cookies in your browser by manually deleting them. Then close all browser instances and restart the browser.

What browser are you using? Does it do this in different browsers or just one?

[aeava]

I've tried this with different browsers (IE6, IE7, FF2).

I have found a solution... Though not the reason yet.

the site URL is something like this:

(1) http://domain.com/folder/admin

The user was accessing the page using the following link

(2) http://www.domain.com/admin, which was doing a simple http refresh forward to (1).

When accessing the site via (2), everything works fine, except when searching, it logs you out.

When accessing the site via (1), everything is fine.


AEAVA

[michael_s]

You have to access the admin panel by the url set up in the configure.php. It sets the session cookie based on the exact domain, and if you switch domains, it will create a new session.

That is a key detail that you left out - switching urls. If you had posted that info in the first place, I could have helped you right away.

Just remember to include everything, even if you think it is insignificant.