We've been using osTicket for a few years and just started getting "Too many redirects" errors today trying to open osTicket. It's still accessible from a private browser window, but not a normal window. Multiple people started seeing this today, so it's not just one user's browser. It appears our hosting provider just upgraded PHP today to 8.2.18. I've seen some suggestions online that it could be something in the .htaccess file. Any ideas what I should look for?
Too many redirects
I learned a little more. It only starts happening if a user follows a certain link: https://lostmarble.com/support/view.php?auth=o1xeqaaaaczaaaaafNhdV%2Byn9%2Bd8vg%3D%3D
Once you do that, then our osTicket stops working in that browser. If you delete cookies, it starts working again. Weird...
It turns out that this didn't start when PHP was updated, it actually started a couple days before that.
That is very strange indeed. Your prerequisites all look fine. Apache shouldn't be causing "too many redirects" as it's going to a single file that would only redirect to one place (either index.php/login.php if failed or ticket.php?id=xxx if successful). I would TRUNCATE the _session table, have everyone clear their browser sessions/cookies, and retest. Also you can try restarting your webserver, etc.
Do you have any other sites or anything running that could be affecting this? Browser plugins, firewall, etc.?
Cheers.
Our users are external, not like coworkers internal to a company. So I can't really say what all plugins and firewalls they might have in place. I know it's happening for multiple people and myself I can reproduce it on Mac, Windows, and iPhone in multiple browsers. I have some ad blocking plugins, but it happens with them all turned off too. I'll look into the _session table.
As far as the "single file that would only redirect to one place" can you point me to that? I'm curious to take a look.
I tried TRUNCATE on the _session table. At first this seemed to fix the issue, but only until I visited a URL in this form again:
https://lostmarble.com/support/view.php?auth=o1xeqaaaaczaaaaafNhdV%2Byn9%2Bd8vg%3D%3D
Then the problem comes back with "too many redirects"
Is it an HTTP -> HTTPS loop? Check the server logs to see what it’s looping to. We know view.php but what is that redirecting to?
Cheers.
18 days later
- Edited
Hello,
After updating to v1.18.2, our users keep encountering the "ERR_TOO_MANY_REDIRECTS" issue. So far, I haven't figured out when exactly this happens. Sometimes, a person creates several tickets in a day, and then it stops working.
Clearing cookies in the browser helps. But today, there was a case where, after clearing the cookies, the issue returned for the same person after an hour.
This happens for both users registering issues and staff who log in to /scp/
One more thing to note: both users registering issues and staff authenticate via LDAP.
Any ideas?
Thanks in advance
- Edited
I would try updating PHP and retesting or something. Also, see if someone not using LDAP can replicate the issue. We cannot replicate this with our production systems.
Cheers.
Hello, do you have any thoughts/suggestions on how to debug this issue?
14 days later
Hello,
It looks that when "too many redirects" issue occurs CSRFToken error is logged..
... see if someone not using LDAP can replicate the issue. We cannot replicate this with our production systems.