bugphpGroupWare - Bugs: bug #1785, Wrong path specification in cookies

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #1785: Wrong path specification in cookies

Submitted by:  None
Submitted on:  Sat 23 Nov 2002 01:25:59 AM UTC  
 
Item Group: 0.9.14 releaseCategory: API - phpGroupware API
Severity: 3 - NormalPriority: 5 - Normal
Status: Wont FixPrivacy: Public
Assigned to: Mark A Peters <skeeter>Open/Closed: Closed
Component Version: SVNOperating System: *BSD
Reproducibility: Every TimePlanned Release: None
Fixed Release: 

Fri 21 Mar 2003 01:34:07 AM UTC, comment #5:

After further discussion, this is not possible to change as it has too many negative impacts on phpgroupware. Also the information was not provided regarding which cookies are set by mailman.

Dave Hall <skwashd>
Project Administrator
Sun 24 Nov 2002 01:53:50 AM UTC, comment #4:

I did some more thinking about this one. It was changed to accomodate the sitemgr app. I have reassigned it to someone who better understands the change and reason for it.

Cheers

Dave Hall <skwashd>
Project Administrator
Sat 23 Nov 2002 10:39:22 PM UTC, comment #3:

It was submitted by me

Eugene Sandulenko <sev_>
Sat 23 Nov 2002 10:33:43 PM UTC, comment #2:

Exactly, earlier it was OK with cookies. They were defined for "host.domain.com" path "/phpgw", but now it is ".domain.com" path "/"

  • I didn't investigate which cooikes assigned by mailman, but in my particular case problem was with cookie named "domain". It just complained that this is not acceptable. If phpgw cookie path was set correct (i.e. "/phpgw"), then it wouldn't interact with directory "/mailman".
  • It is just historical, because earlier there were problems with idsociety theme and use of cookies was forced.
  • It's latest: $Id: class.sessions_db.inc.php,v 1.2.2.9 2002/10/14 13:30:27

$Id: class.sessions_php4.inc.php,v 1.6.2.8 2002/10/14,
so these files weren't touched for a month.

I saw the logic, path '/' is hardcoded in function phpgw_setcookie() which is used from create() in both files.

Anonymous
Sat 23 Nov 2002 10:09:27 AM UTC, comment #1:

Work was done sometime ago on refining phpgw's implementation of cookies. The cookies set by phpgw are now domain cookies. Can you please answer the following questions to assist us in further refinement:

  • what cookies are set/read by mailman?
  • is there a compelling reason why you need to use cookies for passing phpgw session data?
  • when did you last run a cvs update?

Cheers

Dave Hall <skwashd>
Project Administrator
Sat 23 Nov 2002 01:25:59 AM UTC, original submission:

phpgw sets cookies after user login. But all cookies are set to path '/' which may differ from actual installation.

This path is hardcoded in phpgwapi/inc/class.sessions_*.inc.php in function phpgw_setcookie(). The correct behaviour should be extracting path from $GLOBALS['phpgw_info']['server']['webserver_url'].

In my particular case phpgw installation interfered with mailman installation on the same server. Mailman does not allow setting of cookie `domain', but as phpgw set it with path '/', mailman received it and signalled an error.

Anonymous

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 4 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Fri 21 Mar 2003 01:34:07 AM UTCskwashdStatusNone=>(Error - Not Found)
  Open/ClosedOpen=>(Error - Not Found)
Sun 24 Nov 2002 01:53:50 AM UTCskwashdAssigned toskwashd=>NA
Sat 23 Nov 2002 10:09:27 AM UTCskwashdAssigned toNone=>NA

Back to the top


Powered by Savane 3.1-cleanup1