Okay, so I took my hack out in order to try to debug the issues with batch saving that I reported in another thread (this also throws a 403). Logging in now once again throws a 403, and counter to what the Piwigo team is saying, it is not logging me in behind the scenes. When I go back to the home page I am still not logged in. So this is very much a bug and not a simple problem of failing to redirect after login.

Error logged in Firefox console:

POST    http://[my domain]/identification.php
Status    403 Forbidden
Version    HTTP/1.1
Transferred    1.44 KB (1.20 KB size)
Referrer Policy    strict-origin-when-cross-origin

File permissions on identification.php are fine and conform to everything else in the web folder. Again, there may be an underlying CORS issue.

Last edited by TabulaRetina (2021-05-15 18:28:22)

For the past few years I have had this issue with Piwigo, in every single new update.

Until now this fix has resolved the issue, by changing the {$U_REDIRECT|@urlencode} variable to point to my site URL in identification.tpl
But as of version 13 the fix no longer works.

Logging in via the https://*gallery_url*/admin.php page used to work. But now that just redirects automatically to https://*gallery_url*/identification.php?redirect=%252Fadmin.php
Which is still broken. I get a "Forbidden You don't have permission to access this resource. 403" error every time. And going back to any other Piwigo page I remain not logged in.

The ONLY thing that works as of now is to use the "Quick connect" form at the bottom left of the Elegant theme. No other login page and no other theme works.