This seems to be an issue with Blackberry Curve 3G (9300) and cannot figure this out for the life of me.

I downldoaded the simulator and connected via wifi everything seems to be working fine. I’ve tested logging in on two separate BB 9300 devices and experienced the same issues. When using 3G, not wifi and logging into the site, the success redirect message appears and redirects me back to the homepage. Once redirected, it says I’m logged out. As if I were accessing the site from a different IP and my session is no longer stored. When refreshing the page, or navigating to another page it says I’m logged in.

I figured this might be a cookie issue, so I tried setting User Session Type under Security and Settings to Cookies and Session ID. Still no luck.

This works fine on newer models and iphone. Was wondering if anyone had any insight?

Hi Bransin,

On the same Security and Settings page can you set Require IP Address and User Agent for Login? to no then see if issue persists

Changed these settings in EE. I also made sure the client cleared cookies and browser cache on device. Still no luck. I’ve heard that certain devices have a kB limit on cookies? This model is only a year old.

This is also a mobile version of the site with the URL http://www.siteexample.com/mobile

Hi, Bransin. Taking the device out of the equation - I’d try with cookies only, and as John Henry mentioned, use Require IP Address and User Agent for Login? set to no and see what happens.

Cookies are set to only, Require IP Address and User Agent for Login is set to No. The sessions work fine when viewing in any modern browser, iphone, ipod, ipad. My issue is only with the blackberry 9300 for some strange reason.

Hi, Bransin,

If you go to a site like what is my ip?

http://www.whatismyip.com/

and refresh a few times in quick succession - does your IP change or stay the same?

thanks!

Looks like the IP changes every time on reload.

74.82.68.34
74.82.68.36
74.82.68.37

Not too sure on how the EE session cookies work or if there is a possible fix to this?

Hi, Bransin -

You have require IP set to no, correct? What about processing forms in secure mode, are you able to turn that off for testing?

Allow multiple log-ins from a single account? - Yes
Require IP Address and User Agent for posting? - No
Require IP Address and User Agent for Login? - No
Process form data in Secure Mode? - Yes

I’ll turn off “Process form data in Secure Mode?” and test it out.

No dice by turning off “Process form data in Secure Mode”. After logging in, it redirected me to the homepage as a logged out user.

Hi, Bransin,

In Security and Session Preferences, what are you using for user and session types? My next recommendation would be to flip through those and see if any give you more success.

I’d try it for you, but a Blackberry is not in my possession, so we’ll need to work closely together on this one!

For User Session Type I’ve tried the two options “Cookies only”, and “Cookies and Session ID”. Still no luck.

Hi, Bransin -

Let me poke the dev team and see if they have any ideas on this.  I’ll get back to you once I have more info.

Alright, more information from our devs.

Some research found that this might be an issue with the Blackberry software you’re on. Also, in the CI forums folks pointed out that the Blackberry browser doesn’t handle session information stored in cookies when running the site over https.

Is your CP run being https:// or http:// ?

Are you able to try updating your Blackberry software to see if that helps?  If it does not, then using Opera may be your best bet.

Please let me know what you find out.  Thank you!

Hrmmm strange. The entire mobile site is only under HTTP. The form tag action attribute is HTTP also. CP is also running from HTTP. Maybe the CI_SESSION doesn’t work regardless of HTTP/HTTPS when using WAP? http://ellislab.com/forums/viewthread/86984/#745892

Unfortunately this is the clients device so all I can do at this point is recommend upgrading their device software or use the Opera browser.

Hi, Bransin -

Either one of those would be encouraged, at least to test this.  Is your client amenable to such testing?