Magento – Users can’ t login at https store because of double frontend cookie

cookiehttpsmagento-1.9

I have a magento version 1.9.2.4 installation with multiple store views with different urls. One new store view is now running with https in secure and unsecure base url. At this store many customers can't login, because there are two "frontend" cookies being set. One with the domain .domain.de, which is configured in the backend, and one with .www.domain.de. It's only that store with the ssl configuration, the other stores are running fine.

I read a lot of threads, but no one could help me out. My cookie configuration looks like the following:

Default Session Cookie Management

  • Cookie Lifetime: 86400
  • Cookie Path: /
  • Cookie Domain:
  • Use HTTP Only: Yes

Default Session Validation Settings

  • Everything is set to "No"

Store view Session Cookie Management

  • Cookie Domain: .domain.de

Are there any settings for stores running completely under https or is there anything else I can do?

Thanks in advance!

Best Answer

Try to remove the Dot (.) in the cookie domain. Please note that subdomains will no longer receive the cookies, however, Magento doesn't make usage of Subdomains by default (except you've changed that).

This has helped me to login again. If you cannot login into the backend, you can do that manually by moving to your database and set the flag in the core_config_data table

Related Topic