PrestaShop 1.7 back-office settings for dynamic IP change for automatic logout issue.

[Zohaib-fk]

Hi,

 

PrestaShop 1.6.x has settings under the Administrator Preferences to Turn off the "Check Cookies IP address".

 

This helps for dynamic ip changing from ISP and getting logout from back-office.

 

I want to know in prestashop 1.7 where are these settings located.

Edited October 8, 2017 by zohaib82 (see edit history)

[bellini13]

it was moved under Advanced Parameters

[Zohaib-fk]

Thanks.

 

It is moved to Advance Parameters=>Administration menu option in version 1.7.x

[josh barak]

Hi,

I'm using PS 1.7.4.2, and I don't see that option under Advance Parameters=>Administration, I have the same problem of automatic logout when IP changes.

Is there a way to do it directly in database?

 

UPDATE

I was able to do it directly in database.

In the "configuration" table, there is a value "PS_COOKIE_CHECKIP" in "name" column, I changed the value from 1 to 0.

Hopes that works.

Edited October 10, 2018 by josh barak
Found solution (see edit history)

[bellini13]

2 hours ago, josh barak said:

Hi,

I'm using PS 1.7.4.2, and I don't see that option under Advance Parameters=>Administration, I have the same problem of automatic logout when IP changes.

Is there a way to do it directly in database?

 

UPDATE

I was able to do it directly in database.

In the "configuration" table, there is a value "PS_COOKIE_CHECKIP" in "name" column, I changed the value from 1 to 0.

Hopes that works.

I hope you realize that you made it much easier for someone to steal your cookie session and access your back office.

Just because you can do something... doesn't mean that you should.  Does your IP address really change that frequently, and it is that much of an inconvenience to log back into the back office?

[josh barak]

Hi bellini13

Thank you for making me aware to that.

1. I don't really understand, how can someone steal the cookie session?

2. I don't understand how this checkIP feature works. Does it mean I can't access the BO only from a certain IP? That's very strange, what if I want to work from home one day, is it not possible? Also what if my IP changes (Which it does once in a while), then I can't access the BO, not even to change my IP?

[bellini13]

You can access the back office, even if your IP changes.  You just need to log in again

[josh barak]

It didn't work in my case.

I cleared all cache and cookies in my browser, in other words I logged out, and yet each time I logged in, any link I would click would throw me back out to the login page again.

Edited October 11, 2018 by josh barak
spelling mistake (see edit history)

[bellini13]

then perhaps you have a different issue.  Perhaps you have installed a custom module that is interfering, or maybe some misconfiguration on your webserver.

[jasg]

On 10/11/2018 at 12:32 PM, bellini13 said:

then perhaps you have a different issue.  Perhaps you have installed a custom module that is interfering, or maybe some misconfiguration on your webserver.

Hi bellini13,

I have the same issue, what kind of misconfiguration on the webserver can cause this?

I had to disable the cloudflare service to improve this issue, but it continues to happen, although less often.

[DARKF3D3]

I have the same problem too.

I also do what josh barak said, but nothing changed.

Any idea on how to fix this on PS1.7.4.2?

[josh barak]

Try deleting your cookies.

[Shashank Kankar]

On 10/10/2018 at 5:16 PM, josh barak said:

Hi,

I'm using PS 1.7.4.2, and I don't see that option under Advance Parameters=>Administration, I have the same problem of automatic logout when IP changes.

Is there a way to do it directly in database?

 

UPDATE

I was able to do it directly in database.

In the "configuration" table, there is a value "PS_COOKIE_CHECKIP" in "name" column, I changed the value from 1 to 0.

Hopes that works.

Working Fine For me....