logout problem with secure connection

[bkim]

When users are logged in to a secure connection (https) and they click Logout, the redirect seems to go on infinitely.

Please fix this issue?

Thank you.

[dannygoux]

"When users are logged in to a secure connection (https) and they click Logout, the redirect seems to go on infinitely."

Chris - you have not answered this email yet - is there a fix that we can do to get this to work correctly?

Thanks
Danny

[TWT-Chris]

I have not seen this. Its best to open a ticket.

[dannygoux]

I figured it our - if you are running your site with SSL - make the following changes to index.php starting at line 245

case 'logout':
$sess->destroy();
// if ($_SERVER['SERVER_PORT'] == 443 || $_SERVER["HTTPS"] == "on") header("location: ".$settings[shopurl]."index.php?l=logout"); //
// else header("location: ".$settings[shopurl]); exit; //
header("location: ".$settings[shopurl]."index.php"); // this line was added //
break;

The original case created an infinite loop sending "llogout" to index.php if SSL. I removed the check for port 443 and https = on -did not want to waste time running the if statement. The change ends the session and then returns the user to the homepage.

[revlow]

Hi dannygoux,

Thank you! Was having a major problem with this and your recommendation fixed it! Again, many thanks.