PHP 7.1RC3+HTTPS+WordPress = No admin page access

php.internals

Yasuo Ohgaki

9 years ago
Hi all, PHP 7.1RC3+HTTPS+WordPress does not allow admin pages access somehow. You'll get Sorry, you are not allowed to access this page for admin pages. PHP 5.6 works fine, not sure about 7.0. You can use local self signed certificate https server and fresh WordPress 4.6.1 install to reproduce this by ignoring TLS warning. Install with "https://" URL or change "http://" site URL to "https://" after installation. It seems "https://" site URL revokes all permissions. ( $_wp_menu_nopriv is set for admin account somehow ) It works as long as site URL is "http://". Regards, P.S. I didn't look into, but JetPack and Google's AdSense plugin seems to have problem(s) with PHP 7.1. PHP 7.0.11/7.1.0 have additional errors also. https://bugs.php.net/bug.php?id=73238 Use 302 or 307 redirect, i.e. Do not use 301, if you would like to redirect all http traffic to https for testing purpose. Otherwise, your browser remembers https usage. This makes test difficult. You don't need redirect setting to reproduce this.
-- Yasuo Ohgaki yohgaki@ohgaki.net

Yasuo Ohgaki

9 years ago
On Mon, Oct 10, 2016 at 12:14 PM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:
> PHP 7.1RC3+HTTPS+WordPress does not allow admin pages access somehow. You'll get > > Sorry, you are not allowed to access this page > > for admin pages. > PHP 5.6 works fine, not sure about 7.0. > > You can use local self signed certificate https server and fresh > WordPress 4.6.1 install to reproduce this by ignoring TLS warning. > Install with "https://" URL or change "http://" site URL to "https://" > after installation. > > It seems "https://" site URL revokes all permissions. ( > $_wp_menu_nopriv is set for admin account somehow ) It works as long > as site URL is "http://". > > Regards, > > P.S. I didn't look into, but JetPack and Google's AdSense plugin seems > to have problem(s) with PHP 7.1. PHP 7.0.11/7.1.0 have additional > errors also. > https://bugs.php.net/bug.php?id=73238 > > Use 302 or 307 redirect, i.e. Do not use 301, if you would like to > redirect all http traffic to https for testing purpose. Otherwise, > your browser remembers https usage. This makes test difficult. You > don't need redirect setting to reproduce this.
This is WordPress track issue URL https://core.trac.wordpress.org/ticket/38273 Regards,
-- Yasuo Ohgaki yohgaki@ohgaki.net

Yasuo Ohgaki

9 years ago
On Mon, Oct 10, 2016 at 12:43 PM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:
> On Mon, Oct 10, 2016 at 12:14 PM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote: >> PHP 7.1RC3+HTTPS+WordPress does not allow admin pages access somehow. You'll get >> >> Sorry, you are not allowed to access this page >> >> for admin pages. >> PHP 5.6 works fine, not sure about 7.0. >> >> You can use local self signed certificate https server and fresh >> WordPress 4.6.1 install to reproduce this by ignoring TLS warning. >> Install with "https://" URL or change "http://" site URL to "https://" >> after installation. >> >> It seems "https://" site URL revokes all permissions. ( >> $_wp_menu_nopriv is set for admin account somehow ) It works as long >> as site URL is "http://". >> >> Regards, >> >> P.S. I didn't look into, but JetPack and Google's AdSense plugin seems >> to have problem(s) with PHP 7.1. PHP 7.0.11/7.1.0 have additional >> errors also. >> https://bugs.php.net/bug.php?id=73238 >> >> Use 302 or 307 redirect, i.e. Do not use 301, if you would like to >> redirect all http traffic to https for testing purpose. Otherwise, >> your browser remembers https usage. This makes test difficult. You >> don't need redirect setting to reproduce this. > > This is WordPress track issue URL > https://core.trac.wordpress.org/ticket/38273 > > Regards,
Disregard previous mails. There are some problems in JetPack and Google's AdSense plugin, but it seems I messed up my /etc/hosts. If there is anything, I'll post again. Sorry for the noise. Regards,
-- Yasuo Ohgaki yohgaki@ohgaki.net