bugProject Steve Guttenberg - Bugs: bug #2932, PSG uses PHP sessions in an...

 
 

bug #2932: PSG uses PHP sessions in an unconfigured state.

Submitted by:  Will Fischer <stratocaster>
Submitted on:  Tue 25 Mar 2003 10:53:31 PM UTC  
 
Category: Security PolicySeverity: 3 - Normal
Item Group: BugStatus: Fixed
Privacy: PublicAssigned to: Gavin Brown <jodrell>
Open/Closed: Closed

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Mon 07 Apr 2003 02:47:57 PM UTC, comment #1:

I have now added a line into index.php which allows the user to restrict the PHP session cookie path (session_cookie.path) variable to be the parent directory of the PSG script. Users sharing a site can simply uncomment this and cookies will be restricted.

Gavin Brown <jodrell>
Project AdministratorIn charge of this item.
Tue 25 Mar 2003 10:53:31 PM UTC, original submission:

currently, PSG uses PHP sessions in an unconfigured state. This means that login sessions for domain.com/~user1 spill over to domain.com/~user2. This will be fixed, possibly with a config option to define the cookie path.

Will Fischer <stratocaster>
Project Member

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 5 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Mon 07 Apr 2003 02:48:48 PM UTCjodrellStatusNone=>(Error - Not Found)
Mon 07 Apr 2003 02:48:13 PM UTCjodrellOpen/ClosedOpen=>(Error - Not Found)
Mon 07 Apr 2003 01:06:01 PM UTCjodrellCategoryRendering=>(Error - Not Found)
Mon 07 Apr 2003 01:05:45 PM UTCjodrellCategoryNone=>(Error - Not Found)
  Item GroupNone=>(Error - Not Found)

Back to the top


Powered by Savane 3.1-cleanup1