Re: [mv] Minivend 4.04 loses session id with forms?

[Mike Heins <mikeh@minivend.com>]

******    message to minivend-users from Mike Heins <mikeh@minivend.com>     ******

Quoting Sakari Ailus (sakari.ailus@nic.fi):
> Hans-Joachim Leidinger wrote:
> 
> >> In last case forms still work if I specify mv_session_id manually (<form
> >> ACTION="[process-target secure=1]" METHOD=POST>...<input type=hidden
> >> name=mv_session_id value="[data session arg]">...</form>) but, as the
> >> FAQ file says, this should be necessary only with GET forms.
> >
> >I can confirm that. But I'm not able to carry the same session id with
> >
> ><input type=hidden name=mv_session_id value="[data session arg]">
> 
> I meant "data session id", not "data session arg", but still it still
> doesn't work anymore. My mistake.
> 
> >This was my test:
> >
> >- server and secure server has the same domain name
> >- using browser with cookie disable
> 
> Same here.
> 
> >(MV 4.04, FreeBSD 3.4-STABLE, Apache)
> 
> Minivend 4.04, Debian GNU/Linux 2.1, Perl 5.005_03.
> 

I missed the beginning of this thread, but if you are talking
about the phenomenon of changing session ID if the session
is expired, then absolutely this happens on Minivend 4. It
is by design.

Try setting SessionExpire to the level you need and testing.

If you are talking about something else, I would appreciate a
restating of the problem.

-- 
Internet Robotics, 131 Willow Lane, Floor 2, Oxford, OH  45056
phone +1.513.523.7621 fax 7501 <mikeh@minivend.com>

Friends don't let friends use Outlook. -- Bob Blaylock
-
To unsubscribe from the list, DO NOT REPLY to this message.  Instead, send
email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
Archive of past messages: http://www.minivend.com/minivend/minivend-list