Ok, had a look at the session.php file.
I've removed the ini_set('session.cookie_path', $this->path);
directives from __initSession()
I also changed the setcookie() calls to exclude the path parameter:
in __regenerateId() line 456
and destroyInvalid() line 280I'm sure this has opened up profound security holes, but it has also solved the issue with the session being destroyed on firefox. Can't be sure if it's solved the problem with Safari yet, because my friend isn't online. Maybe, if I ask nicely, my client will get me one of those quad-cpu macs with a 30" studio display... you know... for debugging purposes. --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Cake PHP" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/cake-php -~----------~----~----~----~------~----~------~--~---
