jd440 Posted February 19, 2020 Share Posted February 19, 2020 (edited) Bonjour à tous, Je ne comprends pas sur des boutiques en ligne depuis 2013 P.S:1.6 j'ai des déconnexion intempestive du backoffice. Je n'ai pas constaté de soucis en front. Je me connecte le plus souvent via VPN donc avec une ip fixe. Je constate celà sur tous les postes, avec et sans vpn. win/linux, chrome/firefox différentes connexition, ip, et DNS En config j'ai PS_COOKIE_CHECKIP = 0 J'ai tenté aussi : Cette modif : https://www.prestashop.com/forums/topic/129518-déconnexion-intempestive-du-backoffice-et-modifications-de-la-feuille-de-style-qui-sont-sans-effet/ Là je sêche? une idée Edited February 26, 2020 by jd440 (see edit history) Link to comment Share on other sites More sharing options...
jd440 Posted February 27, 2020 Author Share Posted February 27, 2020 Malgré le PS_COOKIE_CHECKIP = 0 PS_COOKIE_LIFETIME_BO = 9999 Je comprends pas pourquoi il se déconnecte? Le cookie n'expire pas et il ne controle pas l'ip? Link to comment Share on other sites More sharing options...
jd440 Posted March 3, 2020 Author Share Posted March 3, 2020 Je vous présente toutes mes excuses, car je déteste les UP. Mais là je suis dans une impasse, le Back office est quasi inutilisable. J'ouvre deux fiches produit et ca se déconnecte. Il n'y a rien dans les log, Le cookie se génére bien et expire dans une date future et du coup je bloque totalement. Encore navré de relancé le sujet mais je sêche @doekia @Mediacom87 une idée, une piste? Link to comment Share on other sites More sharing options...
doekia Posted March 3, 2020 Share Posted March 3, 2020 Et ton ip est la même entre les 2 pages? Ad-blocker agressif? Le cookie est-il bien renvoyé lors du second appel? Combien de cookies ? Taille des cookies ? webserver ? Link to comment Share on other sites More sharing options...
jd440 Posted March 3, 2020 Author Share Posted March 3, 2020 Ip stable et fixe Ad-blocker: J'avais pas envisagé mais viens de tester en le désactivant c'est identique En retracant le chemin de cookie je vois qu'au moment de la déconnexion, le serveur semble envoyé un cookie erronée!? https://www.mondomaine.com/control/index.php?controller=AdminCartRules&token=… (connecté) PrestaShop-26674b20b432ea370157ba5c64c1a2bb domain www.mondomaine.com expires 2021-04-24T12:02:37.000Z httpOnly true path / value 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 Cookies de la requête HttpOnly PrestaShop-26674b20b432ea370157ba5c64c1a2bb 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 https://www.mondomaine.com/control/index.php?controller=AdminCartRules&token=fb99de590c2df14986f1edbdb0b143ac -->Deconnexion Cookies de la réponse HttpOnly;Secure;SameSite Stict PrestaShop-26674b20b432ea370157ba5c64c1a2bb domain www.mondomaine.com expires 2021-04-24T12:18:45.000Z httpOnly true path / value 1HTIiltzkT8R/aKYLGLkcMIdIkz4ZZtAZal1AGGUd4w=000017 Cookies de la requête HttpOnly PrestaShop-26674b20b432ea370157ba5c64c1a2bb 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 Redirction vers la page de log Cookies de la réponse HttpOnly;Secure;SameSite Stict PrestaShop-26674b20b432ea370157ba5c64c1a2bb domain www.mondomaine.com expires 2021-04-24T12:18:45.000Z httpOnly true path / value l6AnDcaUy0OUcRghDhp1YwwMytJqjWdjyT2JkUecbepgKhki3igAnAZwwEFlhmATFg4CTY7Y6izmwVNweXtuIU7fMjtoMVa14Sl8xfJrEjY=000079 Cookies de la requête HttpOnly PrestaShop-26674b20b432ea370157ba5c64c1a2bb 1HTIiltzkT8R/aKYLGLkcMIdIkz4ZZtAZal1AGGUd4w=000017 Reconnecté Cookies de la réponse HttpOnly;Secure;SameSite Stict PrestaShop-26674b20b432ea370157ba5c64c1a2bb domain www.mondomaine.com expires 2021-04-24T12:21:00.000Z httpOnly true path / value l6AnDcaUy0OUcRghDhp1YwwMytJqjWdjyT2JkUecbeokQ0EBuvET3IWQj7o4zfPkR8RJU5/QBmccHe2abiYGgY5pbdb/p6+FQ3lumK0pkei6zzqXT4qpVEKXBeEy1XI7iHAhbMd4FH6T2lp5sDWNlgBKYd4PSWbwPF/xcfWnSN5vaI92Hlil0P3lrx8/BfM14LiwB2H0S7pZa8NRgdPNXbyUznTHaY1EUa/P7nMj8OeZQAy/ UG7GFFzdv5/+QU3k4kG1D0KNyLmI/BrFYjvbuAayQyHCyuWxt15xwyB9ebMgRzUKWLTqmoHvmVE9VciG000226 Cookies de la requête HttpOnly PrestaShop-26674b20b432ea370157ba5c64c1a2bb l6AnDcaUy0OUcRghDhp1YwwMytJqjWdjyT2JkUecbepgKhki3igAnAZwwEFlhmATR8RJU5/QBmccHe2abiYGgY5pbdb/p6+FQ3lumK0pkei6zzqXT4qpVEKXBeEy1XI7iHAhbMd4FH6T2lp5sDWNlgBKYd4PSWbwPF/xcfWnSN5vaI92Hlil0P3lrx8/BfM14LiwB2H0S7pZa8NRgdPNXbyUznTHaY1EUa/P7nMj8OeZQAy/UG7GFFzdv5/+QU3k4kG1D0KNyLmI/BrFYjvbuC89/2VW7k/DOZtpkvbIDCGqI62jPe/wUUqncsuNkbiH000225 Link to comment Share on other sites More sharing options...
doekia Posted March 3, 2020 Share Posted March 3, 2020 il y a 43 minutes, jd440 a dit : HttpOnly;Secure;SameSite Stict j'imagine une coquille de copie là? strict ? Link to comment Share on other sites More sharing options...
jd440 Posted March 4, 2020 Author Share Posted March 4, 2020 (edited) Euh non. Ca m'avais pas sauté au yeux. Je viens corriger Set-Cookie: HttpOnly;Secure;SameSite=Strict Mais ca n'a pas résolut le problème. Nouvelle sequence https://www.mondomaine.com/control/index.php?controller=AdminLogin&redirect=/control/ajax.php?rand=1583309033394 Réponse HTTP/1.1 200 OK Date: Wed, 04 Mar 2020 08:03:53 GMT Server: Apache Expires: Mon, 06 Jun 1985 06:06:00 GMT+1 Login: true Cache-Control: no-store, no-cache Set-Cookie: PrestaShop-26674b20b432ea370157ba5c64c1a2bb=l6AnDcaUy0OUcRghDhp1YycWwhNxB%2B98kgNljg5WqoJgKhki3igAnAZwwEFlhmATFg4CTY7Y6izmwVNweXtuIchRwnUqYVHC8aar01nfhtM%3D000079; expires=Sat, 24-Apr-2021 23:03:53 GMT; Max-Age=35996399; path=/; domain=www.mondomaine.com; HttpOnly X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-FRAME-OPTIONS: SAMEORIGIN […] Set-Cookie: HttpOnly;Secure;SameSite=Strict Content-Security-Policy-Report-Only: script-src 'unsafe-inline' 'unsafe-eval' 'self' *.google.com www.google-analytics.com www.googletagmanager.com bat.bing.com connect.facebook.net ajax.googleapis.com cdn.jsdelivr.net maps.googleapis.com maps.google.com www.googleadservices.com googleads.g.doubleclick.net; img-src 'self' data: www.google.com www.google.fr https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net bat.bing.com maps.gstatic.com maps.googleapis.com maps.google.com; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net […] Requete Host: www.mondomaine.com […] Referer: https://www.mondomaine.com/control/index.php?controller=AdminProducts&token=c498a136b16e85e31db46847d37d87d4 DNT: 1 Connection: keep-alive Cookie: HttpOnly; PrestaShop-26674b20b432ea370157ba5c64c1a2bb=l6AnDcaUy0OUcRghDhp1YycWwhNxB%2B98kgNljg5WqoJgKhki3igAnAZwwEFlhmATFg4CTY7Y6izmwVNweXtuIchRwnUqYVHC8aar01nfhtM%3D000079 Pragma: no-cache https://www.mondomaine.com/control/index.php?controller=AdminProducts&token=c498a136b16e85e31db46847d37d87d4 Deconnecion Reponse HTTP/1.1 302 Found Date: Wed, 04 Mar 2020 08:10:20 GMT Server: Apache […] Set-Cookie: PrestaShop-26674b20b432ea370157ba5c64c1a2bb=0; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1583309420; path=/; domain=www.mondomaine.com; HttpOnly Set-Cookie: PrestaShop-26674b20b432ea370157ba5c64c1a2bb=1HTIiltzkT8R%2FaKYLGLkcMIdIkz4ZZtAZal1AGGUd4w%3D000017; expires=Sat, 24-Apr-2021 23:10:20 GMT; Max-Age=35996399; path=/; domain=www.mondomaine.com; HttpOnly X-XSS-Protection: 1; mode=block Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-FRAME-OPTIONS: SAMEORIGIN Vary: Host,Accept-Encoding Location: index.php?controller=AdminLogin&token=5ff9a57303d342b88d922482592ee373&redirect=AdminProducts Content-Encoding: gzip Set-Cookie: HttpOnly;Secure;SameSite=Strict Content-Security-Policy-Report-Only: script-src 'unsafe-inline' 'unsafe-eval' 'self' *.google.com www.google-analytics.com www.googletagmanager.com bat.bing.com connect.facebook.net ajax.googleapis.com cdn.jsdelivr.net maps.googleapis.com maps.google.com www.googleadservices.com googleads.g.doubleclick.net; img-src 'self' data: www.google.com www.google.fr https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net bat.bing.com maps.gstatic.com maps.googleapis.com maps.google.com; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net […] Requete Host: www.mondomaine.com […] Referer: https://www.mondomaine.com/control/index.php?controller=AdminProducts&token=c498a136b16e85e31db46847d37d87d4 DNT: 1 Connection: keep-alive Cookie: HttpOnly; PrestaShop-26674b20b432ea370157ba5c64c1a2bb=l6AnDcaUy0OUcRghDhp1YycWwhNxB%2B98kgNljg5WqoJgKhki3igAnAZwwEFlhmATFg4CTY7Y6izmwVNweXtuIchRwnUqYVHC8aar01nfhtM%3D000079 Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache J'arrive pas à comprendre. Dans ce cas alors que la requete au moment de la deconnexion renvoie bien le cookie. Dans la réponse, le serveur réponds par un double cookie Set-Cookie: PrestaShop-26674b20b432ea370157ba5c64c1a2bb=0; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1583309420; path=/; domain=www.mondomaine.com; HttpOnly Set-Cookie: PrestaShop-26674b20b432ea370157ba5c64c1a2bb=1HTIiltzkT8R%2FaKYLGLkcMIdIkz4ZZtAZal1AGGUd4w%3D000017; expires=Sat, 24-Apr-2021 23:10:20 GMT; Max-Age=35996399; path=/; domain=www.mondomaine.com; HttpOnly Dont un nouveau, qui semble troqué, et sans date 1970 @doekia Le point que tu as soulevé sur "stict" m'a faire chercher du coté d'apache et non PS. 40 min que j'ai pas été deconnecté. Il semblerait que le souci viennent de # Add le 6/02/20 #Header set Set-Cookie HttpOnly;Secure;SameSite=Strict #Header always set X-FRAME-OPTIONS "SAMEORIGIN" #Header set Content-Security-Policy-Report-Only "script-src 'unsafe-inline' 'unsafe-eval' 'self' *.google.com www.google-analytics.com www.googletagmanager.com bat.bing.com connect.facebook.net ajax.googleapis.com cdn.jsdelivr.net maps.googleapis.com maps.google.com www.googleadservices.com googleads.g.doubleclick.net; img-src 'self' data: www.google.com www.google.fr https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net bat.bing.com maps.gstatic.com maps.googleapis.com maps.google.com; connect-src 'self' https://www.google-analytics.com www.google-analytics.com https://stats.g.doubleclick.net" Mince problème toujours non résolut Edited March 4, 2020 by jd440 complément d'info (see edit history) Link to comment Share on other sites More sharing options...
doekia Posted March 4, 2020 Share Posted March 4, 2020 Il y a 1 heure, jd440 a dit : Expires: Mon, 06 Jun 1985 06:06:00 GMT+1 ?? Tu n'aurais pas un problème de date sur le serveur? Link to comment Share on other sites More sharing options...
jd440 Posted March 4, 2020 Author Share Posted March 4, 2020 (edited) non # date Wed Mar 4 11:28:02 CET 2020 effectivement le soucis semble venir de là Autant pour moi la date 1985 est l'expire de la page pas du cookie. Le cookie a bien une date dans le future Edited March 4, 2020 by jd440 (see edit history) Link to comment Share on other sites More sharing options...
jd440 Posted March 5, 2020 Author Share Posted March 5, 2020 Y a pas de session enregistrer sur les serveurs ? Si? où? Link to comment Share on other sites More sharing options...
doekia Posted March 5, 2020 Share Posted March 5, 2020 PrestaShop n'utilises pas les sessions avant la 1.7 Link to comment Share on other sites More sharing options...
jd440 Posted March 5, 2020 Author Share Posted March 5, 2020 C'est ce qui me semblait. donc me souci ne viens pas de là Link to comment Share on other sites More sharing options...
doekia Posted March 5, 2020 Share Posted March 5, 2020 Tu as quand même j'imagine déja vérifié qu'il y pas un BOM qui casserai l'envoi de cookie Link to comment Share on other sites More sharing options...
jd440 Posted March 5, 2020 Author Share Posted March 5, 2020 Un BOM kesako? Link to comment Share on other sites More sharing options...
Eolia Posted March 6, 2020 Share Posted March 6, 2020 Byte Order Mark Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now