bugphpGroupWare - Bugs: bug #3618, list_session function of class...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #3618: list_session function of class sessions_ph4 intrudes on other installations

Submitted by:  Michael Totschnig <totschnig>
Submitted on:  Thu 15 May 2003 02:16:34 AM UTC  
 
Item Group: 0.9.14.003 releaseCategory: API - Admin
Severity: 6 - SecurityPriority: 9 - Immediate
Status: Wont FixPrivacy: Public
Assigned to: Invalid User ID <Invalid User ID>Open/Closed: Closed
Component Version: NoneOperating System: None
Reproducibility: NonePlanned Release: None
Fixed Release: 

Sat 17 May 2003 02:43:46 AM UTC, comment #1:

If I am not mistaken, the code takes care of filtering out sessions of other virtual domains of the same phpgroupware installation. What it does not handle different phpgroupware installations, which all use only one, the default domain.

Michael Totschnig <totschnig>
Thu 15 May 2003 02:16:34 AM UTC, original submission:

if there are several installations of phpgroupware on one system, and they use the same temp dir, and you view the active sessions, you can see the sessions of all installations there are on your system. You can even kill them!!!

Michael Totschnig <totschnig>

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

No Changes Have Been Made to This Item

Back to the top


Powered by Savane 3.1-cleanup1