Hi All,

We noticed a strange behavior where users reported that their session is 
timing out abruptly. On debugging the issue, we found the following 
behavior.

When the user keeps working on different sections of the application, the 
same CAKEPHP session id is being send as a part of the header (we got it 
through apache logs).

But there is a 404 request to browserconfig.xml. We don't have this file in 
our root. 
When this call is made, a 404 response is given back, but the cakephp also 
gives back a new session id. The next request from this user comes with 
this new id and it finds this to be a session missing and logs the user out 
of the system.

What could be the reason for this??

*HTTP : Log *

"GET /browserconfig.xml HTTP/1.1" 404 158 

*User Agent:*

"-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; Trident/7.0; Touch; MDDCJS; 
rv:11.0) like Gecko" 

*HTTP Header:*

"_mkto_trk=id:895-WNT-152&token:_mch-greatplacetowork.com-1389204011408-64400; 
__utma=188050558.2113426640.1389215158.1391549861.1391919029.7; 
__utmz=188050558.1391919029.7.6.utmcsr=culturesurvey.greatplacetowork.com|utmccn=(referral)|utmcmd=referral|utmcct=/Pages/sessionTimeOutPage/;
 
__qca=P0-981991203-1389215159220; CAKEPHP=pko85qkvb33iqq08aeip1l9t07" 

*HTTP Response:*

"CAKEPHP=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/, CAKEPHP=
vfnpkrkpd0a8fllgskofs8bgs7; expires=Mon, 10-Feb-2014 03:36:59 GMT; path=/; 
HttpOnly"

Regards,
Thyagarajan D.

-- 
Like Us on FaceBook https://www.facebook.com/CakePHP
Find us on Twitter http://twitter.com/CakePHP

--- 
You received this message because you are subscribed to the Google Groups 
"CakePHP" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cake-php+unsubscr...@googlegroups.com.
To post to this group, send email to cake-php@googlegroups.com.
Visit this group at http://groups.google.com/group/cake-php.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to