[ http://issues.apache.org/jira/browse/MODPYTHON-86?page=all ]
Jim Gallacher resolved MODPYTHON-86:
------------------------------------
Fix Version: 3.2
Resolution: Fixed
> Multiple session cookies created when ApplicationPath is set to /
> -----------------------------------------------------------------
>
> Key: MODPYTHON-86
> URL: http://issues.apache.org/jira/browse/MODPYTHON-86
> Project: mod_python
> Type: Bug
> Versions: 3.2
> Environment: mod_python-3.2.2b.win32-py2.4.exe
> Reporter: Jim Gallacher
> Assignee: Jim Gallacher
> Fix For: 3.2
>
> Originally reported by Villiam Manera on mod_python list.
> """
> Apache configuration --> PythonOption ApplicationPath '/'
> Before the beta there was only a cookie: pysid with path = '/'
> With the beta in place there are many pysid with different path,seems one
> each module I call, example:
> Pysyd: e81c661b3c9d11948a3b643c4c031695855e254a61239279086ef1bb8916c10c path:/
> Pysid: 855e254a61239279086ef1bb8916c10c path: /cgi-mpy/cgi_mpy_utentis.py/
> Pysyd: 855e254a61239279086ef1bb8916c10c path: /cgi-mpy/cgi-mpy_menu.py/
> Pysyd: 855e254a61239279086ef1bb8916c10c path: /comm/comm_menu.py/
> Pysyd: 855e254a61239279086ef1bb8916c10c path: /pf/pf_magauto.py/ ......
> """
> Villiam traced the problem to the following code in Session.py
> class BaseSession(dict):
> .........
> if self._sid:
> # attempt to load ourselves
> self.lock()
> if self.load():
> self._new = 0
> if not req.headers_out.has_key("Set-Cookie"):
> Cookie.add_cookie(self._req,
> Cookie.Cookie(session_cookie_name, self._sid))
> The last two lines were added to 3.2 to support some new session handling
> functionality. For various reasons that new functionality has been deferred
> until 3.3, but the new code was not removed. That should not be a problem,
> except that it is both buggy and wrong. :-(
> The correct fix for the 3.2.x release is to remove those 2 lines.
> if self._sid:
> # attempt to load ourselves
> self.lock()
> if self.load():
> self._new = 0
> #if not cookies.has_key(session_cookie_name):
> # Cookie.add_cookie(self._req, self.make_cookie())
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira
