Problem Logging In To Orchidboard

[WaterWitchin]

Lucky YOU! I'm still randomly slogging. Can't upload photos... just boots me right out if I go to Gallery regardless. But when I can get logged in I can still do admin stuff. Maybe it's a plot...

[estación seca]

I wonder whether the Gallery has its own set of cookies?

[MCD]

I have noticed that some links on the site are "http" rather than "https", as are the links that are sent in e-mail notifications. Most browsers will treat the plain http site as separate when it comes to cookies, so if you're coming from an https page where you are logged in and you follow one of those plain http links, it may appear that you've been logged out. I've noticed some of those links in the gallery in particular.

[estación seca]

In the past when I've posted links in messages others have had problems if I write https links. The problems don't occur if I write http links. The login for Orchid Board is http and can't be forced to https even if I try. Maybe that's part of the issue. But then once logged in I can use https with OB.`

[MCD]

Ideally this site would not be accessible over http at all, that can usually be setup on the server side on the hosting platform. It's not a great idea to browse anything on the internet these days without https, and it's a very very bad idea to provide a user name and password on any site over plain http.

On the client side, most browsers have a setting to force the use of https (at least chrome and firefox do). I just enabled that on mine and that takes care of the problem of links that send you back to http, as the browser makes those https for you.

[Dusty Ol' Man]

Originally Posted by WaterWitchin

Lucky YOU! I'm still randomly slogging. Can't upload photos... just boots me right out if I go to Gallery regardless. But when I can get logged in I can still do admin stuff. Maybe it's a plot...

There is ALWAYS a plot!

[estación seca]

Other people here reported problems accessing links I posted as https, which problems disappeared when posted as http. The software is very old and the owner is unlikely to updated it anytime soon. I hope nobody is using the same login here and anywhere else, because the login process here can be viewed by anybody with access to the data pathway.

[Roberta]

Originally Posted by MCD

Ideally this site would not be accessible over http at all, that can usually be setup on the server side on the hosting platform. It's not a great idea to browse anything on the internet these days without https, and it's a very very bad idea to provide a user name and password on any site over plain http.

On the client side, most browsers have a setting to force the use of https (at least chrome and firefox do). I just enabled that on mine and that takes care of the problem of links that send you back to http, as the browser makes those https for you.

I went to using http:// for the home page after having major complaints from my antivirus program due to an expired certificate, a couple of years ago, that went on for several months until I got tired of dealing with it. That may have been resolved for the moment, but given the level of support for the site, likely to come back. I just don't use credentials that I use anyplace else.