[The Assurer]

Did a test with the new setup and it’s still doing the same thing: It seems there is a problem from the point that the payment is made to where you are supposed to be given the option to create a user name and password, i.e. the hand-back from paypal to the website plugin…

@tallon — Something is wrong with your description. As shown in the flowchart that describes the registration process, you’re supposed to be choosing the user name & password BEFORE making a payment:
https://simple-membership-plugin.com/membership-registration-process-overview

When people first signup for memberships on your site; are they first directed to a “registration page,” and then PayPal?

[The Assurer]

Are you using any kind of page caching?

[The Assurer]

@JohnSF — I just did 5 sequential login / logouts from your site:
* Login / Logout = Successful
* Login / Logout = Successful
* Login / Logout = Successful
* Login / Logout = Successful
* Login / Logout = Successful

The criteria for a successful logout was the absence of the “LOGOUT” link, in the menu bar; after it had been clicked.

[The Assurer]

Here is a recommended security plugin:
https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/

[The Assurer]

Bless me Father, for I have registered.

[The Assurer]

@JohnSF — Please provide us with a URL and test account credentials.

[The Assurer]

Please provide the URL of the protected page.

[The Assurer]

1. Which browser and platform are you using?
2. When you close the browser, are you closing the browser window, or just the browser tab?

Are you able to create a test account for us, so we can try and replicate this behavior? In addition to the test account credentials, please provide the URL of the site.

[The Assurer]

@mirarno
If they register using a Gmail account, say “johnrwilliams@gmail.com” they can also use:
john.r.williams and johnr.williams and john.rwilliams and any email sent to the Gmail account will still go to the johnrwilliams email account. In other words, Gmail ignores periods in an email address. Ditto with “+” plus signs.

[The Assurer]

As of this moment, I am able to login / logout to my heart’s content without any issues.

Ok, so, it looks like is browser cache and not varnish cache that appears to be doing it (???).

I never use local (browser) caching. I got Chrome setup to force a new page load on each page visit. Were you using the mod_headers module on your other site?

[The Assurer]

See if Varnish has a way to not serve cached pages, when the swpm_in_use cookie is in use.

[The Assurer]

@gphsupport
I just tried your test account…
* First time Login / Logout was successful.
* Subsequent Login / Logout are unsuccessful.
* Deleting all cookies returns me to a logged out state.
* Subsequent Login / Logout are unsuccessful.
Are you using any kind of page caching or CDN service?

[The Assurer]

The site is in a subfolder (which i seen noted on other threads/tickets; although none of the threads list any solution). And I see one cookie (swpm_session) is on Path: / while all others (swpm_in_use, simple_wp_membership…, wordpress_sec…, wordpress_logged_in…) are all on Path: /aviate/.

Question: Is the WordPress instance for “aviate” the only WordPress instance you have on the stiraallternatives.com domain that is running the simple-membership plugin? Or are you running the plugin in more than 1 subdirectory or subdomain on the same server?

Yes, I see the plugin is using the root “/” path and the entire domain, for the swpm_session cookie, while all other cookies are using COOKIEPATH and COOKIE_DOMAIN in the setcookie() calls. This will be investigated.

Also, which browser and version are you using?

[The Assurer]

Clicking ‘Logout’ does the redirection, but doesn’t clear any cookies.

Is the problem; the user is still logged in, or that you still see the cookie?

[The Assurer]

I think you are looking for this:
https://www.tipsandtricks-hq.com/wp-button-creator-plugin-easily-create-beautiful-call-to-action-buttons-4829

[Author]

Posts