Bug #20424

Built In shopping basket is not working

Added by Mathias Schreiber about 6 years ago. Updated about 5 years ago.

Status:Closed Start date:2009-05-14
Priority:Should have Due date:
Assigned To:Benjamin Mack % Done:

0%

Category:Communication Spent time: -
Target version:-
TYPO3 Version:4.2 Is Regression:
PHP Version:5.2 Sprint Focus:
Complexity:

Description

The built in shopping basket is being blocked by the session fixation fix.
By default (and manual) the FE waits for the GPVar "recs" and then automatically stores things in the session.
Unfourtunately the session fixation fix changes the cookieId and id of the fe_user record to different values.
The tslib_feuserAuth::record_registration function check whether these values are the same (which the fixation fix denies).

Ingmar and I thought about this and we want to remove the check in record_registration.
Will attach patch soon (maybe after the coding night)

PHP:
/** * Enter description here... *
*/
class user_pleaseMichiel {
public function justdoItDontAsk($content, $conf) {
debug($GLOBALS['TSFE']->fe_user->sesData);
}
}
?>

=========
TS:
config {
doctype = xhtml_trans
xmlprologue = none
xhtml_cleaning = all
}

  1. Default PAGE object:
    page = PAGE

page.10 = TEXT
page.10.value (
<form action="index.php" method="post">
<input field="hidden" name="recs[tt_content][1]" value="3" />
<input type="submit" name="submit" value="machma" />
</form>
)

page.includeLibs.myFunc = fileadmin/neverstorephphere/user_doesntmatter.php
page.20 = USER_INT
page.20.userFunc = user_pleaseMichiel->justdoItDontAsk

========
See if there is data in the session.

(issue imported from #M11089)

11089.diff Magnifier (739 Bytes) Administrator Admin, 2009-05-15 23:52

T3X_shoppingbaskettest-0_0_0-z-201001171910.t3x (5.9 kB) Administrator Admin, 2010-01-17 19:10


Related issues

related to Core - Bug #19831: Session fixation vulnerability in user authentication Resolved 2009-01-15
related to Core - Bug #19908: session fixation fix avoid BE login Resolved 2009-01-25
duplicated by Core - Bug #20290: Adding entries to recs[]-Array not working Resolved 2009-04-07

History

#1 Updated by Benjamin Mack over 5 years ago

More information about the functionality of the basket here:

http://typo3.org/documentation/document-library/core-documentation/doc_core_tsref/4.3.0/view/1/13/#id2539088

Also, check my demo extension to set a value to the shopping basket

#2 Updated by Benjamin Mack over 5 years ago

Committed to trunk (rev. 6803)
Committed to TYPO3_4-3 (rev. 6804)
Committed to TYPO3_4-2 (rev. 6805)

Also available in: Atom PDF