Re: Membership logoff page

11 posts by 3 authors in: Forums > CMS Builder
Last Post: July 16, 2019   (RSS)

By gversion - July 12, 2019

In response to: https://www.interactivetools.com/forum/forum-posts.php?postNum=2241031#post2241031

I am using the Website Membership plugin and I have set my logoff URL to be google.com:

$GLOBALS['WEBSITE_LOGIN_POST_LOGOFF_URL'] = PREFIX_URL.'https://www.google.com';

When I click a logoff text link the page just refreshes and it seems I am not logged out.

This is the link code I am using:

<a href="?action=logoff">Sign out</a>

Could someone please advise me?

Regards,

Greg

By daniel - July 12, 2019

Hi Greg,

There are a few things to comment on here.

First, it looks like there's an issue in the plugin where it will essentially never use the WEBSITE_LOGIN_POST_LOGOFF_URL value. If you want to use the post-logoff URL, find the following line in websiteMembership.php (line 189 in version 1.13):

$logoffUrl = coalesce(@$_SERVER['HTTP_REFERER'], $GLOBALS['WEBSITE_LOGIN_POST_LOGOFF_URL'],  $currentPageUrl, '/');

And change it to this:

$logoffUrl = coalesce($GLOBALS['WEBSITE_LOGIN_POST_LOGOFF_URL'], @$_SERVER['HTTP_REFERER'], $currentPageUrl, '/');

Second, you can remove "PREFIX_URL" from the Google URL so that it looks like this:

$GLOBALS['WEBSITE_LOGIN_POST_LOGOFF_URL'] = 'https://www.google.com';

In most cases, PREFIX_URL will be empty and not cause any issues, but there are some situations where it could be a problem.

Unfortunately, I can't think of a reason why the above issues would prevent you from logging out; the link you're using should work regardless. My recommendation at this point would be to try making the above changes to see if there's any effect, in case they're having some unexpected effect. If not, let me know and I can try to think of some further troubleshooting steps.

Thanks,

Daniel
Technical Lead
interactivetools.com

By gversion - July 12, 2019

Hi Daniel,

Thank you for the reply. I have followed your suggestions but the logoff is still not redirecting to google.com.

I would be extremely grateful if you could suggest any other things I can try.

Thanks again,

Greg

By Toledoh - July 12, 2019

I had the same issue a while back and figured out it was due to a mix up between https and http...  it seemed that I was using both, and y fixing that with permalinks .htaccess it seemed to sort things.

Cheers,

Tim (toledoh.com.au)

By gversion - July 12, 2019

Thanks, Daniel. I have submitted the support request.

Regards,

Greg

By gversion - July 12, 2019

Hi Tim,

Thanks for the suggestion. Can you explain what exactly you did to fix this? Is it just a case of ensuring that there are no links with mixed content?

Regards,

Greg

By Toledoh - July 12, 2019

That's correct, just making sure that I was logged in using https, then logging out via https...  The easiest way I can think of to ensure that is to force https via .htaccess?

Cheers,

Tim (toledoh.com.au)

By gversion - July 12, 2019

Thank, Tim. I’m actually already forcing https and all my links are relative...

Hopefully Daniel will find the solution!

Regards,

Greg 

By daniel - July 15, 2019

Hey Greg,

Thanks for sending in the support request; I was able to figure out the issue. In your .htacces you have a number of rules to set up Expires caching, and two of them were causing some problems:

ExpiresByType text/html "access 1 month"
ExpiresDefault "access 2 days"

These were causing the browser to cache any HTML pages, including things like where they redirect to. When dealing with a dynamic site that returns HTML based on things like login status this can create a lot of inconsistent behaviours, such as not logging out correctly and not processing redirects as expected. I've commented out these two rules, and things appear to be working as expected now. As you've likely already cached the pages, you'll probably need to clear your cache in order to start seeing the effect.

Let me know if that fixes things for you, or if you have any other questions.

Thanks!

Daniel
Technical Lead
interactivetools.com