Thread: Involuntary logging out

From time to time we have customers report being logged out while using the website. This is from an email we received from a customer yesterday:

"I can do about two or three clicks through the website and it drops me (logs me out)."

That particular user has reported this issue several times.

The site is version 8.0.1.0.

Any idea what could be causing that?

Thanks.

Is it just jumping from page to page or adding items to the cart?

Not sure I understand your question.

Do you mean did it log out while she was jumping from page to page or adding items to the cart? If so, I don't know.

On the other hand, the person who yesterday reported being logged out involuntarily also reported that her wish list vanished. Disappearing wish lists is an issue several other aspdotnetstorefront sites have reported (in another thread - http://forums.aspdotnetstorefront.co...p?t-20878.html) over the past year. That issue has not been resolved. Wonder if the two things are related?

Check in AppConfig if GoNonSecure is set to 'false'. This sounds a bit like an issue I had before.

Just checked reports of involuntary logging out over the past four months. There have been only three, but in each case the logging out and disappearing wishlist happened at the same time. Assuming they are related some way, I'll need to explore which is happening first and causing the second.

I do have some custom code on my wishlist, so it could be something I did. (The custom code retains the wishlist items in the wishlist after they are added to the cart and allows for setting quantities before moving an item to the cart.) But we have dozens of customers regularly using their wishlists and only a few reports of problems. Also, as mentioned in the previous post, several other aspdotnetstorefront sites have reported disappearing wishlists.

ZachJ85, thanks for the suggestion. I see that the recommended setting is 'false.' Did changing the setting to 'true' cause any problems on your site?

I'll do some additional research and if I don't see any reports of issues with a 'true' setting or some other compelling reason to keep it at 'false' I'll run a test tonight. (99% of site visits happen during business hours.)

Hey, when the previous guy working here configured the site he had it set to 'true' and users would get logged out and lose their cart when they browsed the site or added random items to the cart.

I changed that to 'false' and added a line of code which corrected this issue for us.

Keep us all updated in what you find.


Zach

Zach, Thanks for clarifying. Must have read your earlier post too quickly and thought you were suggesting I change the setting to 'true.' I'll leave it at false and spend time trying to determine if there is a connection between the forced log-out and the wishlist disappearing.

But, I think you may be right that it could be an SSL issue. I found another thread that's now closed that reported forced logout issues as site pages mysteriously jumped between http to https. That gives me another area to explore.

Here's one scenario we discovered that is forcing a logout on both of the sites we manage. We suspect there are other scenarios out there.

This assumes "UseSSL" appconfig is set to true and "GoNonSecureAgain" appconfig is set to false.

Log in and go to a product page. (Your pages are now all https.) On the product page, click the button that saves the item to the wish list. On the wish list page, click either of the 'Continue Shopping..' buttons.

Our experience is that the last click takes you back to the product page, but you are logged out and it's now an http page. Then, when we log back in, the wish list has been wiped out, as have any items we had in the shopping cart.

Interested to hear if others get a different outcome.

As a temporary fix, we just set visible=false on the two Continue Shopping button on the wishlist page.

Have you continued to see this problem? Another potential is your host provider. If you use shared hosting at Applied Innovations (some others do this also), they have a hard cutoff on your RAM. Meaning, they wipe all sessions if you cross your account's RAM limit. We had this issue with several sites.

I'm over at an ASPDNSF recommended hosting provider: Server Intellect. How do I find out if this is my issue?

We run 8.0.1.2, the same AppConfigs and confirm the following to be true;

Originally Posted by gleapman

This assumes "UseSSL" appconfig is set to true and "GoNonSecureAgain" appconfig is set to false.

Log in and go to a product page. (Your pages are now all https.) On the product page, click the button that saves the item to the wish list. On the wish list page, click either of the 'Continue Shopping..' buttons.

Our experience is that the last click takes you back to the product page, but you are logged out and it's now an http page. Then, when we log back in, the wish list has been wiped out, as have any items we had in the shopping cart.

Has this been fixed in 8.0.1.4?

Another cause of this we found is if the template has a hardcoded menu/links with http/https in them... always use relative links.