I'm experiencing weird cookie/redirect issues after logging in the admin/cp. Keeps redirecting to / (even on /) untill I've deleted my cookies.

Clean download/install, no errors occured. I have no idea what to check:

  • clean download of latest version 2.4.2700, no changes
  • different domain/hosting tested, still redirect occurs
  • different browsers tested, same results

Pulling my hair out here, any suggestions/ideas?

-- edit It has to be a cookie/session related issue, but all paths are 'normal'. Using CentOS with cPanel, all up to date

  • Have you made changes to the htaccess file?
    – aran
    Oct 28 '15 at 15:20
  • No, we even removed the .htaccess to make sure that wasn't the issue. Using the index.php gives no other result unfortunately :(
    – Chris
    Oct 28 '15 at 15:26
  • Are you using any caching like Varnish/Cloudflare/PHP opcache/APC/etc?
    – Brad Bell
    Oct 28 '15 at 15:29
  • Nope, no caching server/service is being used
    – Chris
    Oct 28 '15 at 15:48
  • Did this happen from initially installing? If not could it be a plugin dashboard widget issue?
    – aran
    Oct 28 '15 at 15:56

This was a ModSecurity rule tripping up the request and causing an infinite redirect loop.

I don't know which rule it was exactly, but disabling ModSecurity resolved the issue.

  • 1
    Thank you Brad, it appears to have triggered rules: 973337: XSS Filter - Category 2: Event Handler Vector and 981246: Detects basic SQL authentication bypass attempts 3/3. I have reported this to cPanel for wrongly triggering with Craft. Aug 16 '16 at 22:20
  • ModSec is such a pain. Rule 981243: Detects classic SQL injection probings 2/2 has begun causing the redirect issue as well. Aug 18 '16 at 12:26
  • 1
    IMO things like ModSec and Suhosin are generally more pain than they're worth.
    – Brad Bell
    Aug 18 '16 at 15:54
  • Agreed. Disabled it's SQL Injection filters, one more problem out of it, and it's being nuked. Aug 18 '16 at 20:01

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.