Ed

Checkboxes also don’t seem to appear.

No, nothing like that. But that wouldn’t matter as it’s not working on any of my local Windows VMs at home either.

Ah, I’m using Varnish, but I’ve even piped it through and the same thing happens.

Traced it back to wp-includes/pluggable.php and just commented them out to see if that let IE logins work, still nothing. I see that it kicks off the wp_clear_auth_cookie function in the wp-login.php, sending the request cookies through. Not seen it happen on anyone elses install though. The only two plugins that I have that use the wp_clear_auth_cookie function are User Switching and Domain Mapping, but I disabled them both and it still happens. So still not got anywhere ??

It’s also definitely not cached, I commented out the test cookie in wp-login.php and it removes that cookie from the response, so something is setting those cookies and I’m betting that’s confusing IE. Anyone got any ideas for tracking down what’s setting the cookies? I’ve grepped for setcookies and been through the entire install recursively, nothing in there looks out of order. Was hoping there’d be a debugbar extension for cookies but I can’t see anything.

Not sure why, but I’m getting a lot response cookies from the server when visiting the wp-login.php redirected page:

set-cookie:wordpress_sec_randommd5stringhere=+; expires=Tue, 18-Feb-2014 17:49:38 GMT; Max-Age=-31536000; path=/; domain=domainhere.com
set-cookie:wordpresspass_randommd5stringhere=+; expires=Tue, 18-Feb-2014 17:49:38 GMT; Max-Age=-31536000; path=/; domain=domainhere.com
set-cookie:spo_5_fa=465b922cf006622ec4e0a812f7092e8c; expires=Wed, 18-Feb-2015 18:19:38 GMT; Max-Age=1800; path=/
set-cookie:wordpress_test_cookie=WP+Cookie+check; path=/; domain=domainhere.com; secure
set-cookie:wordpress_randommd5stringhere=+; expires=Tue, 18-Feb-2014 17:49:38 GMT; Max-Age=-31536000; path=/; domain=domainhere.com
set-cookie:wordpressuser_randommd5stringhere=+; expires=Tue, 18-Feb-2014 17:49:38 GMT; Max-Age=-31536000; path=/; domain=domainhere.com
set-cookie:wordpress_randommd5stringhere=+; expires=Tue, 18-Feb-2014 17:49:38 GMT; Max-Age=-31536000; path=/wp-content/plugins; domain=domainhere.com
set-cookie:wordpress_sec_randommd5stringhere=+; expires=Tue, 18-Feb-2014 17:49:38 GMT; Max-Age=-31536000; path=/wp-content/plugins; domain=domainhere.com
set-cookie:wordpress_logged_in_randommd5stringhere=+; expires=Tue, 18-Feb-2014 17:49:38 GMT; Max-Age=-31536000; path=/; domain=domainhere.com
set-cookie:wordpress_logged_in_randommd5stringhere=+; expires=Tue, 18-Feb-2014 17:49:38 GMT; Max-Age=-31536000; path=/; domain=domainhere.com
set-cookie:wordpress_randommd5stringhere=+; expires=Tue, 18-Feb-2014 17:49:38 GMT; Max-Age=-31536000; path=/; domain=domainhere.com
set-cookie:wordpress_randommd5stringhere=+; expires=Tue, 18-Feb-2014 17:49:38 GMT; Max-Age=-31536000; path=/; domain=domainhere.com
set-cookie:wordpress_sec_randommd5stringhere=+; expires=Tue, 18-Feb-2014 17:49:38 GMT; Max-Age=-31536000; path=/; domain=domainhere.com
set-cookie:wordpress_sec_randommd5stringhere=+; expires=Tue, 18-Feb-2014 17:49:38 GMT; Max-Age=-31536000; path=/; domain=domainhere.com
set-cookie:wordpressuser_randommd5stringhere=+; expires=Tue, 18-Feb-2014 17:49:38 GMT; Max-Age=-31536000; path=/; domain=domainhere.com
set-cookie:wordpresspass_randommd5stringhere=+; expires=Tue, 18-Feb-2014 17:49:38 GMT; Max-Age=-31536000; path=/; domain=domainhere.com

It can’t be a plugin as I disabled all of them again on both the network and normal admin plugin areas. I haven’t got cookies being set in any of my server configs either. I’ve grepped for the string but can’t find anything.

Hehe, they’re just primary and secondary schools in the UK, but UK wide so firewalls will vary. Locally it’s Smoothwall, but I know there use alternatives in other council controlled areas. The majority of the UK education sector currently have their school internet provided via their local council (groups of towns, not sure what you’d call it elsewhere) under contract, but all vary their implementation.

I’m not sure it has anything to do with the firewall though as it happens at school and home for the users, including me obviously. I know it’s definitely something going on with my setup, but I’ve disabled it down to bare bones now with no plugins (mu included), twentyeleven theme on the main site, no object cache, php extensions disabled including opcache, varnish disabled, wp-config stripped to within an inch of it’s life. I’m at a loss now ?? Only solution is to pretend it’s not a subdomain network, until I need to add a new blog. I’m betting it’s something stupidly simple and a mistake on my part, or possibly something in the database that is skewing things.

I was made aware of it by three different parties trying to use IE unfortunately. I’ve tested at their institutions and can confirm that it’s all versions of IE from 8-11.

You can disregard the double cookies issue, using InPrivate Browsing doesn’t give the same result but it still fails with the error.

According to NinjaFirewall that I installed recently, I have logged in fine and it logged the POST. All IE says is “ERROR: Cookies are blocked or not supported by your browser. You must enable cookies to use WordPress.”

Yeah, double cookies for IE and fine for Chrome. Chrome cookies are also secure but IE is not.

IE: https://www.dropbox.com/s/b5wsf9rvgaim0bg/Screenshot%202015-02-02%2018.54.19.png?dl=0

Chrome: https://www.dropbox.com/s/pgua3bo85g1oyat/Screenshot%202015-02-02%2018.56.22.png?dl=0

Yeah, no difference. I’m just testing at the moment on IE with both subdomain mode and non-subdomain mode and the subdomain mode seems to generate 2 of the same cookie. Checking if Chrome does the same thing now. Will post screenshots shortly.

Thought I’d have another crack at fixing this, seeing as it’s still not ?? Does anyone have any ideas?

This issue has reoccurred in version 1.5.0. Just in the admin area, but no JS errors in console.

It doesn’t purge it by default unfortunately as it’s not saved as a post or comment, but adding the two actions above has allowed it to purge on each entry being created or deleted. The actions are listed here – https://www.gravityhelp.com/documentation/page/Developer_Docs