after upgrading from v2.1.3 to v2.10 i am no longer seeing several cookies including exp_uniqueid, exp_userhash, and exp_memberid. I can only seem to log into the admin CP and not the site anymore.
I'm going to jot down what I have in my bog standard 2.10.1 install, after logging in. My install is fully working.
- PHPSESSID (for finding server session)
- exp_sessionid (for finding your ee session)
- exp_csrf_token (for Form anti-forgery)
I think the 'missing' cookies are actually a good thing! With them MITM attacks and other personal information gathering vectors could be used. I beleive EE now uses a more standard principle of toring your session in the DB, the session vars in your PHP session, and just a couple of reference fields for matching are sent via cookies (noted above).
This method is way more secure, yes we have a couple of nuggets of info but these are de-personalised. i.e. if I visited your machine while you were taking a 'toilet break' I could lift your cookies, they'd tell me when someone was last on the site on your computer, but doesn't tell me anything about what user it was...
Of course we don't have an answer yet as to why your login Is not working. We need to check the basics first (sorry):
Clear Cache, Clear Cookies, Go Private Browsing, authenticate and monitor the cookies sent
Please can you check and let us know your Security Settings (
Admin > Security & Privacy > Security & Sessions)