SSL loop - cannot log into backoffice!

[sheribaby]

Hi,

 

I'm haveing a big problem, I cannot log into backoffice anymore.

 

it just says "SSL is activated. Please connect using the following url to log in in secure mode (https)." and gives an adress which loops back to the same page. HELP!

 

I have version 1.4.4. of prestashop.

[gkontos]

Hi,

 

I'm haveing a big problem, I cannot log into backoffice anymore.

 

it just says "SSL is activated. Please connect using the following url to log in in secure mode (https)." and gives an adress which loops back to the same page. HELP!

 

I have version 1.4.4. of prestashop.

 

This sounds like a mod_rewrite issue to me.

 

If you are using "friendly urls" a quick hack would be to remove your .htaccss file (BACKUP FIRST!!!), clear your browser history and log in to the backoffice.

You will have to regenerate your .htaccess again.

[defensetechga]

I also am having this issue after upgrade to 1.4.9

 

Back-office is saying "SSL is activated. Please connect using the following url to log in in secure mode (https)."

but i went into database and its shows ssl as set to 0

 

I changed to 1 saved then changed to 0 saved

 

removed htaccess file and clear browser and flushed dns still cannot access back office.

 

Anyone know whats wrong and how to fix.

[metamorpher]

Exactly same problem here

[sting5]

I'm having same issue, nobody found a solution to it yet?

[vekia]

you've got this issue even after you clear cache in your browser? (i've noticed several times that this is commonly related to browser cache)

[sting5]

Hi vekia,

 

thanks for advice, I did, even tried connecting through other computers, but the problem persists. I've found other topics in forum regarding this issue, they're suggesting it's because SSL certificate is set by a host via non-dedicated IP. But this seems to be unreal... Maybe anyone found other solution, because buying virtual server package is too high priced...

[YMOON]

Hi vekia,

 

thanks for advice, I did, even tried connecting through other computers, but the problem persists. I've found other topics in forum regarding this issue, they're suggesting it's because SSL certificate is set by a host via non-dedicated IP. But this seems to be unreal... Maybe anyone found other solution, because buying virtual server package is too high priced...

 

Hi everyone! I know this is an old post but as I faced the same problem and I found a 'solution' for it I post my experience.

 

So, what I find is that the problem comes from the login.php from the admin folder. I do not understand php but as I do not have somebody to help me and I search for weeks to find a solution without success, I decided to take a look to the code just waiting for a miracle!

 

There are some differences in the code between the PS 1.4.8 and PS 1.4.9. for the login.php

 

In PS 1.4.8 on line 39 to 52 says:

 

if ((empty($_SERVER['HTTPS']) OR strtolower($_SERVER['HTTPS']) == 'off')

AND Configuration::get('PS_SSL_ENABLED'))

 

{

// You can uncomment theses lines if you want to force https even from localhost and automatically redirect

// header('HTTP/1.1 301 Moved Permanently');

// header('Location: '.Tools::getShopDomainSsl(true).$_SERVER['REQUEST_URI']);

// exit();

 

// If ssl is enabled, https protocol is required. Exception for maintenance and local (127.0.0.1) IP

if ($clientIsMaintenanceOrLocal)

$errors[] = translate('SSL is activated. However, your IP is allowed to use unsecure mode (Maintenance or local IP).').'<br/>';

else

$warningSslMessage = translate('SSL is activated. Please connect using the following url to log in in secure mode (https).')

}

 

 

In PS 1.4.9 on line 39 to 52 says:

 

 

if ((empty($_SERVER['HTTPS']) OR strtolower($_SERVER['HTTPS']) == 'off')

AND _PS_SSL_ENABLED_)

{

// You can uncomment theses lines if you want to force https even from localhost and automatically redirect

// header('HTTP/1.1 301 Moved Permanently');

// header('Location: '.Tools::getShopDomainSsl(true).$_SERVER['REQUEST_URI']);

// exit();

 

// If ssl is enabled, https protocol is required. Exception for maintenance and local (127.0.0.1) IP

if ($clientIsMaintenanceOrLocal)

$errors[] = translate('SSL is activated. However, your IP is allowed to use unsecure mode (Maintenance or local IP).').'<br/>';

else

$warningSslMessage = translate('SSL is activated. Please connect using the following url to log in in secure mode (https).')

}

 

So, I replaced the login.php from the PS 1.4.9 with the PS 1.4.8. And I could login without problem and the ssl warning disappeared.

 

Hope this would be useful for someone.

 

Regards!