Problems loggin into an insecure server

Developing with Concrete
1

I am moving a site to a new host and that host doesn’t provide any way to browse the new server other than adding an entry in the Hosts file to hit their server and they can’t issue a SSL certificate yet. Although that’s a real pain, I can get around it and I’m hitting the new server BUT I can’t log in. I’m getting the error “User is not registered. Check your authentication controller”. There are some notes in the code by @andrew in login.php around this message implying some issues. Any thoughts are appreciated.

2

I seem to have fixed it. Not sure if it was something my new host did or a setting in Edge to lessen security requirement.

3

I also have experienced that error in the past.
The problem was that the session cookie (the one that tells Concrete there’s a logged in user) is marked as “secure”, whereas the website was only available via HTTP and not HTTPS.

The solution was to add/edit the application/config/concrete.php configuration file, setting this configuration:

<?php

return [
    'session' => [
        'cookie' => [
            'cookie_secure' => false,
        ],
    ],
];
4

Thx. I’m still having the occasional issue with this as I build things out so I’ll toss that code in there and see if it helps.

5

Is it multisite, by chance? If so and you’re having a hard time logging into subdomains, you may need to set the cookie_domain config to .example.com (with your actual domain, of course).

6

Thx but no, it’s a boring old single site. The problem’s gone but that’s good info for others who might have this problem.