[ http://issues.apache.org/jira/browse/MODPYTHON-86?page=all ] Jim Gallacher resolved MODPYTHON-86: ------------------------------------
Fix Version: 3.2 Resolution: Fixed > Multiple session cookies created when ApplicationPath is set to / > ----------------------------------------------------------------- > > Key: MODPYTHON-86 > URL: http://issues.apache.org/jira/browse/MODPYTHON-86 > Project: mod_python > Type: Bug > Versions: 3.2 > Environment: mod_python-3.2.2b.win32-py2.4.exe > Reporter: Jim Gallacher > Assignee: Jim Gallacher > Fix For: 3.2 > > Originally reported by Villiam Manera on mod_python list. > """ > Apache configuration --> PythonOption ApplicationPath '/' > Before the beta there was only a cookie: pysid with path = '/' > With the beta in place there are many pysid with different path,seems one > each module I call, example: > Pysyd: e81c661b3c9d11948a3b643c4c031695855e254a61239279086ef1bb8916c10c path:/ > Pysid: 855e254a61239279086ef1bb8916c10c path: /cgi-mpy/cgi_mpy_utentis.py/ > Pysyd: 855e254a61239279086ef1bb8916c10c path: /cgi-mpy/cgi-mpy_menu.py/ > Pysyd: 855e254a61239279086ef1bb8916c10c path: /comm/comm_menu.py/ > Pysyd: 855e254a61239279086ef1bb8916c10c path: /pf/pf_magauto.py/ ...... > """ > Villiam traced the problem to the following code in Session.py > class BaseSession(dict): > ......... > if self._sid: > # attempt to load ourselves > self.lock() > if self.load(): > self._new = 0 > if not req.headers_out.has_key("Set-Cookie"): > Cookie.add_cookie(self._req, > Cookie.Cookie(session_cookie_name, self._sid)) > The last two lines were added to 3.2 to support some new session handling > functionality. For various reasons that new functionality has been deferred > until 3.3, but the new code was not removed. That should not be a problem, > except that it is both buggy and wrong. :-( > The correct fix for the 3.2.x release is to remove those 2 lines. > if self._sid: > # attempt to load ourselves > self.lock() > if self.load(): > self._new = 0 > #if not cookies.has_key(session_cookie_name): > # Cookie.add_cookie(self._req, self.make_cookie()) -- This message is automatically generated by JIRA. - If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa - For more information on JIRA, see: http://www.atlassian.com/software/jira