网站‘Add Query’链接未登录重定向问题：localhost正常，服务器异常

Hey there! Let's figure out why your unauthenticated redirect to the login page works on localhost but breaks after deploying to your live host. These environment-specific hiccups are super common—here are the top things to check and fix:

1. Session Handling Discrepancies #

Localhost usually has more lenient session cookie settings compared to live servers. If your session initialization code has hardcoded localhost values (like for session.cookie_domain), that won't translate to your live domain.

• Fix: Use dynamic values to set session cookies based on the server's environment. Here's a PHP example:

  session_set_cookie_params([
      'lifetime' => 3600,
      'path' => '/',
      'domain' => $_SERVER['HTTP_HOST'],
      'secure' => isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] === 'on',
      'httponly' => true,
      'samesite' => 'Lax'
  ]);
  session_start();
  

  This ensures your session cookies work correctly no matter the domain.

2. URL Path Mismatches #

If you're using relative paths (like login.php) for your redirect, a mismatched file structure on the live server could break it. Also, some hosts enforce HTTPS, so redirecting to an http:// URL might get blocked or rewritten incorrectly.

• Fix: Use root-relative paths (like /login.php) instead of relative ones, and confirm your login page lives in the exact same directory structure as your local setup. If your host uses HTTPS, update your redirect URL to use https:// too.

3. .htaccess Interference #

Live hosts often have default server rules that clash with custom .htaccess settings (like URL rewriting). If you forgot to upload your .htaccess file, or the host's rules are overriding yours, that could stop the redirect from firing.

• Fix: Double-check that your .htaccess file is uploaded to the root directory of your live site. Temporarily disable any rewrite rules to test if the redirect works without them—if it does, adjust your rules to play nice with the host's configuration.

4. Broken Authentication Check Logic #

Sometimes local testing uses hardcoded test users or skips checks that don't work in production. For example, if your code checks for $_SESSION['user_id'] to verify login status, make sure that variable is actually being set correctly when users log in on the live server.

• Fix: Add temporary debug output (like var_dump($_SESSION);) to your "Add Query" page to see if session variables exist for unauthenticated users. Don't forget to remove these debug lines once you're done!

5. Browser Caching #

Your browser might be caching the old localhost behavior, making it seem like the live site isn't working.

• Fix: Clear your browser cache, or test the live site in incognito/private mode to rule out cached data.

内容的提问来源于stack exchange，提问作者Sourav