Menu

#1 Bad cookie check

v1.0 (example)
closed-fixed
nobody
None
5
2014-11-10
2006-10-23
Anonymous
No

Hi,

I've found a bug when I use auth memcookie with PHP
(with the memcache PEAR module).

When i validate my login page:

- i create the memcache object (the session with the
generated key like in the example)
- i create the vslauthcookie which contains my key
- i create the vslauthcookie_public with my own data
- and i create another cookie with a different name and
values and with a long expiration time (it's for
statistics purpose)

The problem is :
even if i tell in the apache configuration that the
name of the cookie which contains the session key is
"vslauthcookie", the module will ALWAYS check the value
of my third created cookie.

This bugs doesn't appear if i create my long like
cookie first.

Discussion

  • Mathieu CARBONNEAUX

    • status: open --> pending
     
  • Mathieu CARBONNEAUX

    Logged In: YES
    user_id=1445557
    Originator: NO

    thank for your report.

    i'have tryed to fix un 1.0.1, you can check!

     
  • SourceForge Robot

    • status: pending --> closed
     
  • SourceForge Robot

    Logged In: YES
    user_id=1312539
    Originator: NO

    This Tracker item was closed automatically by the system. It was
    previously set to a Pending status, and the original submitter
    did not respond within 14 days (the time period specified by
    the administrator of this Tracker).

     
  • Mathieu CARBONNEAUX

    • status: closed --> closed-fixed
    • Group: --> v1.0 (example)
     
MongoDB Logo MongoDB