https: and http: problem

Forum Moderators: phranque

Message Too Old, No Replies

https: and http: problem

https http problem members area

Jonzy9

10:47 pm on May 7, 2024 (gmt 0)

Hello,

I have members area on my website example.com/members. Problem is :

1. when URL is https:// (https://example.com/members) visitors must enter their username/password twice (popup reappears) and that is big problem for me because they immediately
report that their username and password doesn't work

2. when URL is http:// (http://example.com/members) everything is fine

How can I fix this?

Thank you for any help

[edited by: not2easy at 3:13 pm (utc) on Jun 6, 2024]
[edit reason] exemplified domain [/edit]

not2easy

3:24 pm on Jun 6, 2024 (gmt 0)

Hi Jonzy9 and welcome to WebmasterWorld [webmasterworld.com]

It sounds as if you do not have a canonical 301 rewrite on your site. Have you edited your .htaccess file or your httpd settings to ensure that only the https URLS are active? This would cause many other problems with indexing. You should add a canonical rewrite to ensure that all 4 versions of your site can only be accessed by your preferred URLs.

Google sees the following URLs as four different sites even though it is one domain:
http://example.com
https://example.com
http://www.example.com
https://www.example.com

Since we have no clues about the environment (HTML site, BB site, WP site or another platform?) no 'fix' can be offered.

I apologize for the late response here, I did not see this when it was posted weeks ago, sorry.

lucy24

4:31 pm on Jun 6, 2024 (gmt 0)

You’ll need to explain (1) exactly how the login popup is activated: is it done at the server level with htpasswd, or on-page using some type of scripting, and (2) exactly where and when the https redirect takes place. It sounds as if the user is getting connected to the page twice, hence the two popups: once at https, and then again after the redirect has happened.

I did not see this when it was posted weeks ago, sorry.

Me neither :( so I hope OP is still around.

:: wandering off to read up on htpasswd, in case that’s involved here ::