Site migrated to the new server with PHP 7.2 and I can't log in We're preparing to get our Drupal infrastructure moved from PHP 5.6 to PHP 7.2. In order to start testing, I migrated a Drupal 7.67 multi-site from our current production server to a test server running PHP 7.2 and got one of the sites configured. So far, everything about the web site appears to work fine (visual, navigation, etc). Except that I can't log in!

When I navigate to /user/login, type my username and password, and click submit, there's evidence in the database that the login appears successful (users.login timestamp updates), and I'm redirected to /users/myusername, but it says "Access Denied" and doesn't show the top bar to change config, content, etc.

Drush appears to work fine for changing my password (upwd), creating one-time login links (uli), etc, but the login link doesn't work, instead showing "Access Denied" again.

I've checked just about everything you're supposed to check when issues like this come up:


Verified mod_rewrite is enabled
Tried with and without Base URL setting enabled in settings.php
Tried with and without RewriteBase setting in .htaccess
Tried with and without cookie_domain setting in settings.php
Cleared caches and truncated tables like cache*, flood, semaphore, sessions, watchdog
Made sure no database updates are pending
Restarted Apache periodically
Checked Apache error logs, nothing of note there
Tried multiple browsers from multiple computers, with and without Incognito modes


I have no idea what else to try, and sadly I'm not even sure if this is simply related to migrating the site from one server to another or whether it's because we moved from PHP 5.6 to PHP 7.2. Where do I begin troubleshooting this? Thank you in advance for your help!
We found the problem. The site was using HTTPS on the production server and HTTP on the test server, and we had set php_flag session.cookie_secure On in our Apache config. HTTPS wasn't in use, so no cookies were sent, so no logins would work properly. Setting this to Off worked wonders. Thanks for pointing me in the right direction, folks!