bugphpGroupWare - Bugs: bug #3332, Cookie Session Expiration Bug

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #3332: Cookie Session Expiration Bug

Submitted by:  Adam Hull <adamhull>
Submitted on:  Fri 25 Apr 2003 08:05:49 PM UTC  
 
Item Group: NoneCategory: API - phpGroupware API
Severity: 3 - NormalPriority: 5 - Normal
Status: NonePrivacy: Public
Assigned to: Invalid User ID <Invalid User ID>Open/Closed: Closed
Component Version: NoneOperating System: None
Reproducibility: Every TimePlanned Release: None
Fixed Release: 

Fri 27 Jun 2003 03:01:54 AM UTC, comment #3:

this has been fixed in 16

Dave Hall <skwashd>
Project Administrator
Sat 26 Apr 2003 03:59:21 PM UTC, comment #2:

sounds good ralf, deleting the cookie would work as well. I have also reset my session by deleting the cookie manually.

fixing it in .16 branch only is ok with me because .16 will be out so soon. But it may be helpful to post the code fix here for the record in case anyone needs to fix it themselves in .14. I would think the fix should be identical in the 2 branches.

Adam Hull <adamhull>
Fri 25 Apr 2003 08:06:29 PM UTC, comment #1:

Oh, also, I have experienced this in both 0.9.14 and 0.9.16 branches - fixe

Adam Hull <adamhull>
Fri 25 Apr 2003 08:05:49 PM UTC, original submission:

Using cookie sessions, if a user stays logged in and the cookie expires, the user is experiences being logged out and cannot log in again. In reality what is happening is phpgroupware is not killing the session and will not let the user log in again. If you manually call logout.php or restart the users browser, the user can log in again.

Here what skwashd reccommends be done:
<skwashd> the session cookies are being interpreted wrongly after a session time out
<skwashd> and so phpgw is getting confused
<skwashd> but .... if you call logout manually it resolves the issue
<fixe> ah, hmmm. so maybe we can have phpgw kill dead sessions?
<skwashd> so .....
<skwashd> we need the index page to check if the session is dead ....
<skwashd> if yes then throw the user to login ... after killing the session
<skwashd> if no ... continue on as usual
----------
I am making an attempt at this but I cannot yet figure out how phpgw determines if a session has ended. The cookie itself does nto appear to have a timestamp, it only says "expires when session has ended". - Adam (fixe)

Adam Hull <adamhull>

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follows 1 latest change.

Date Changed By Updated Field Previous Value => Replaced By
Fri 27 Jun 2003 03:01:54 AM UTCskwashdOpen/ClosedOpen=>(Error - Not Found)

Back to the top


Powered by Savane 3.1-cleanup1