Unable to login via index

TonyRomanelli

Hello! I'm hoping someone may be able to help out.

Everything was running fine on our Flarum install. All of a sudden, everyone was logged out and when you attempt to log back in, your username and password is authenticated and when the page reloads you're logged back out.

Now, the crazy part is that if you go to an existing thread and click the reply space at the bottom, you're presented with the login modal. If you login from here you're fully authenticated and everything works as expected.

Any ideas?

Kulga

TonyRomanelli All of a sudden, everyone was logged out and when you attempt to log back in, your username and password is authenticated and when the page reloads you're logged back out.

weird - happen to be using any caching or anything?

jordanjay29

No changes to your flarum install recently (any recent extensions installed/removed? did you run composer update recently?)? Don't do anything to change it now, just let me know if you did.

TonyRomanelli

jordanjay29 Nope. Nothing has changed. It literally just randomly started happening.

TonyRomanelli

Kulga Nope. We're not using anything.

I had a few users report that when they visited the forum today, they were auto-logged into other peoples accounts. Not even sure how that would happen.

Kulga

TonyRomanelli recently start using cloudflare?

they were auto-logged into other peoples accounts. Not even sure how that would happen.

Everything you're writing has happened before due to caching. You may not of done anything, but perhaps your hosting service automatically enabled some kind of CDN (like cloudflare) that offers caching.

tarun

TonyRomanelli That's freaky! Do you have any other information.. were people using public computers to sign up by any chance?

TonyRomanelli

Kulga Negative, no cloudfare. However we did have a massive influx of users trying to sign up all at the same time. 30,000+ to be exact. Could it have just been a fluke because of that? It seems to be running back to normal now. Maybe it was too much stress on the install?

TonyRomanelli

tarun I can't say for certain. We had some press that went viral, people started signing up. It wasn't at an event or anything if that's what you're asking. ?

tarun

TonyRomanelli Sometimes in a Company/University, I've noticed people forgetting to logout after they use a website, and when someone else tries to use the same terminal, they get the previous users session. Just a thought.