Hi,

When I have the JomSocial Redirect plugin active, it is not possible to for another user to login after me provided they try to login from the same computer. Even worse, when I enter a different username, but the password of the previous user, I get to login as the previous user. I think this has to do with storing the username in a cookie, which does not get deleted properly. Disabling JomSocial Redirect solves the problem, but then I run into different non-login issues (not being redirected for one). How can I solve this while keeping the plugin active?

STEPS TO REPLICATE:
1 Login as user A
2 Logout
3 Login as user B (fails)
4 Login as user B with password of A (works)

BROWSER: Chrome

Hi, Kirsten.

Please, upgrade to latest version of JomSocial 4.1.3 and check if issue persist.
If yes, please, edit your first post and provide credentials for user A and B.

The update didn't solve the issue.

Hi, Kirsten.

Please, remove Community Builder from your system. It overtakes login process.

I removed Community Builder Login module, but to no avail. I still cannot login with another username, while JomSocial Redirect plugin is published.

HI, Kirsten.

I asked to remove ALL Community Builder extensions.

Done, but it doesn't change anything. Right now, I cannot login using any username/password combination, until disabling the jomsocial redirect plugin.

Hi, Kirsten.

Now I'm correctly redirected to Login/Logout page... but every time login fails... hmmm... I assign developer to take a look.

Hi,

there is must bu conflict in somewhere. can I download your site by using Akeeba backup?
I need to make site copy at my local for debugging purpose. I need that site copy because at debugging process can damaging your site badly.

for temporary, please turn off jomsocial redirect plugin

Regards

Hi Albertus,

This is ok, as long as you delete the website afterwards. Will you debug the site locally? Or with the actual site itself. The latter would mean that I shouldn't work on the site myself during that time.
Thanks!

Hi,

your site downloaded, and I will debugging locally . so you can use your site without any interruption. but for temporary, please turn off jomsocial redirect plugin.

I will back to you again later.

Regards

Hi,

not sure where the issue come from. all username always changed to "Gast1448000654"
this is strange issue. also not from 3rd party extensions.

here the solution that I can give it to you.

edit:
/plugins/system/jomsocialredirect/jomsocialredirect.php at line 142
changing it from

$credentials ['username'] = JRequest::getVar('username');

$credentials['username'] = $_POST['username'];

Thanks Albertus, that works!