slim Posted December 28, 2019 Share Posted December 28, 2019 (edited) I use WHMCS on laptop and each time I connect via a different connection i’m forced to login again, and go through 2FA. This is painful when traveling and using a combo of 4g and wifi in various places. What's the reason WHMCS does this when many other services are ok with changed connections / IP’s? Edited December 28, 2019 by slim spelink 0 Quote Link to comment Share on other sites More sharing options...
zomex Posted December 29, 2019 Share Posted December 29, 2019 On 12/28/2019 at 12:58 AM, slim said: I use WHMCS on laptop and each time I connect via a different connection i’m forced to login again, and go through 2FA. This is painful when traveling and using a combo of 4g and wifi in various places. What's the reason WHMCS does this when many other services are ok with changed connections / IP’s? Have you selected the Remember me checkbox when logging-in? I remember having similar issues in the past before, since using this option I am not having to login again and this is with different connections. 0 Quote Link to comment Share on other sites More sharing options...
slim Posted December 29, 2019 Author Share Posted December 29, 2019 Yes, i tick it. As a test , using my iPhone I logged out and logged back in with the box ticked. After logging in I enabled the VPN on my iPhone to give myself a different IP. Then I refreshed the WHMCS admin page in my browser - which takes me directly to the login again. So frustrating. 0 Quote Link to comment Share on other sites More sharing options...
WHMCS ChrisD Posted December 30, 2019 Share Posted December 30, 2019 Hello @slim Under Setup > General Settings > Security try unticking the 'Disable Session IP Check' checkbox, we do check your IP for each session so if the IP changes you will need to re-login with this ticked 1 Quote Link to comment Share on other sites More sharing options...
slim Posted December 30, 2019 Author Share Posted December 30, 2019 (edited) Hi Chris Thanks - I think you may have nailed this. The field is unticked in my install. As I read the setting I take it that this means WHMCS is checking the session and due to the IP changing its re asking for login credentials. I have now ticked this setting - which should disable this check. Edited December 30, 2019 by slim 0 Quote Link to comment Share on other sites More sharing options...
WHMCS ChrisD Posted December 30, 2019 Share Posted December 30, 2019 8 minutes ago, slim said: Hi Chris Thanks - I think you may have nailed this. The field is unticked in my install. As I read the setting I take it that this means WHMCS is checking the session and due to the IP changing its re asking for login credentials. I have now ticked this setting - which should disable this check. Glad you have this sorted 🙂 1 Quote Link to comment Share on other sites More sharing options...
slim Posted December 30, 2019 Author Share Posted December 30, 2019 I can confirm this is now allowing me to switch between regular WiFi and VPN and Celluar on my iphone without logging in again. However, is this a real security issue? 0 Quote Link to comment Share on other sites More sharing options...
WHMCS Technical Analyst II WHMCS Alex Posted December 30, 2019 WHMCS Technical Analyst II Share Posted December 30, 2019 Hello @slim, This is used to protect against cookie/session hijacking and ideally should remain unticked. If you find you are being logged out so frequently that WHMCS becomes unusable, this is normally more of an indication of WHMCS receiving HTTP requests from a proxy or DDOS protection service, such as CloudFlare (where the IP changes frequently). If that is the case here, you will want to configure your Trusted Proxy Settings to account for this: https://docs.whmcs.com/Trusted_Proxy_Settings 0 Quote Link to comment Share on other sites More sharing options...
slim Posted January 3, 2020 Author Share Posted January 3, 2020 It’s due to IP change - due to moving around from location to location. 0 Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.