Ticket #285 (Fixed)Thu May 05 08:33:53 UTC 2011
Following results of 'Search whole site' (via Google search) defaults to HTTP, giving the impression of being logged out
| Reported by: | Trevor Johnson (329) | Severity: | Minor |
| Part: | Web site: General (miscellaneous issues) | Release: | 3rd public site release |
| Milestone: | 3rd public site release completed | Status | Fixed |
Details by Trevor Johnson (329):
Ticket #25 is nicely fixed but the ‘Search whole site’ feature uses Google, which by default lists results via HTTP.
- If logged in via HTTPS, following such a search result has the effect of the rest of the session being navigated under the impression of being logged out.
- Manually changing the URL to use HTTPS (or clicking on ‘Log in’) reveals that the user is indeed still logged in.
Could one possible solution be the adoption of a custom search API, modifying the search results according to whether the user is logged in or not? Or perhaps there’s a simpler solution.
Changelog:
Modified by Andrew Hodgkinson (6) Fri, August 30 2013 - 05:18:05 GMT
Fixed by Changeset #439, Changeset #440 and Changeset #441.
Modified by Andrew Hodgkinson (6) Fri, August 30 2013 - 05:18:55 GMT
- Status changed from Open to Fixed
Everything now runs under HTTPS including off-site searches (Google having supported HTTPS for searches for a long time).
