Re: cake 1.18 - has it changed the behavior of Sessions?

2007-12-12 Thread simon

I've experienced the same bug, and changing from high to medium
security seems to have solved it.
I'm doing a lot of AJAX stuff in the background, is that what is
causing it? Or this a general bug with security set to high?

Simon

On Nov 21, 2:29 pm, keymaster [EMAIL PROTECTED] wrote:
 I have an app which has been working steadily for almost a year,
 through several cake releases, up to and including cake 1.17.

 When I upgrated to cake 1.18, with no changes to the app, all of a
 suddensessionvariables aredisappearingduring some (not all) of my
 ajax requests. The call to $this-Session-check('myVar') is returning
 false.

 I am using CAKE_SECURITY = high.

 I checked through the release notes of 1.18 and found severalsession
 related fixes. One in particular caught my eye - it had to do with a
 bugfix to regeneratesessionid's on every request. (update which
 fixes #3313)

 I wondered if perhaps that might have something to do with my
 problems.

 So, I lowered CAKE_SECURITY from high to medium. That fixed the
 problem. To double check, I raised it back to high, and problem
 returned.

 I reverted back to cake 1.17 and there was no problem both for
 CAKE_SECURITY = high and low.

 Anyone else experience problems withsessionvars in 1.18?

 Are we supposed to do things differently now thatsessionid's are
 being regenerated for CAKE_SECURITY = high?
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups Cake 
PHP group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~--~~~~--~~--~--~---



cake 1.18 - has it changed the behavior of Sessions?

2007-11-21 Thread keymaster

I have an app which has been working steadily for almost a year,
through several cake releases, up to and including cake 1.17.

When I upgrated to cake 1.18, with no changes to the app, all of a
sudden session variables are disappearing during some (not all) of my
ajax requests. The call to $this-Session-check('myVar') is returning
false.

I am using CAKE_SECURITY = high.

I checked through the release notes of 1.18 and found several session
related fixes. One in particular caught my eye - it had to do with a
bugfix to regenerate session id's on every request. (update which
fixes #3313)

I wondered if perhaps that might have something to do with my
problems.

So, I lowered CAKE_SECURITY from high to medium. That fixed the
problem. To double check, I raised it back to high, and problem
returned.

I reverted back to cake 1.17 and there was no problem both for
CAKE_SECURITY = high and low.

Anyone else experience problems with session vars in 1.18?

Are we supposed to do things differently now that session id's are
being regenerated for CAKE_SECURITY = high?


--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups Cake 
PHP group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~--~~~~--~~--~--~---