[ic] Extra sessions created, session id truncated PATCH

Josh Lavin josh at perusion.com
Thu Feb 6 00:33:11 UTC 2014


Quoting Angus Rogerson (arogerso at uwaterloo.ca):
> 
> I have come across some problems in the creation of session ids. On
> the demo store:
> - remove the demo.icdevgroup.org MV_SESSION_ID cookie in your browser
> - go to the catalog index page http://demo.icdevgroup.org/i/demo4/index.html
> - observe that a cookie has been set for demo.icdevgroup.org MV_SESSION_ID (ex: 4wZTiDBk:173.33.173.140)
> - click on the 'home' link to reload the page (http://demo.icdevgroup.org/i/demo4/index.html?bread_reset=1&id=4wZTiDBk)
> - note that the cookie has been changed with a new session id, and truncated ip address (ex: EtNhFSXf:173)

Angus, thank you for your patch. Mark fixed this yesterday:
https://github.com/interchange/interchange/commit/38090de9a35ebc9fad304991c05489bd20164317

-- 
Josh Lavin
Perusion -- Expert Interchange Consulting    http://www.perusion.com/
... ask me about job opportunities ...



More information about the interchange-users mailing list