Bug #19880

Patch 10146 in Version 4.2.4 does not work for me. None of the FE Sessions are beeing kept

Added by Michael Fritz over 6 years ago. Updated over 6 years ago.

Status:Resolved Start date:2009-01-21
Priority:Should have Due date:
Assigned To:Michael Stucki % Done:

0%

Category:Communication Spent time: -
Target version:-
TYPO3 Version:4.2 Is Regression:
PHP Version:5.2 Sprint Focus:
Complexity:

Description

if (!$id || !$this->isExistingSessionRecord($id)) {
// New random session-$id is made
$id = substr(md5(uniqid('').getmypid()),0,$this->hash_length);
// New session
$this->newSessionID = TRUE;
}

(issue imported from #M10217)


Related issues

related to Core - Bug #19831: Session fixation vulnerability in user authentication Resolved 2009-01-15
duplicates Core - Bug #19867: DB session records are only created when users authenticate Resolved 2009-01-20

History

#1 Updated by Michael Fritz over 6 years ago

BTW: Powermail is not working with 4.2.4 because of patch 10146.

#2 Updated by Sys-Tech over 6 years ago

I confirm, Powermail is broken with 4.2.4. Same thing with ext:Commerce. Rolled-back to 4.2.3

#3 Updated by Franz Holzinger over 6 years ago

All versions of tt_products do not work in latest TYPO3 4.3 from svn and also not in 4.2.4. The basket is always empty.
In install tool I have deleted the 'Encryption key:'. but I cannot regenerate it any more. The button 'Generate random key' does not react in FF3 and IE6.

#4 Updated by Michael Fritz over 6 years ago

Bug #19867 offers a fix that worked for me!

Also available in: Atom PDF