Hi,

we just encountered a problem when trying to logout using the logout link 
generated by oxviewconfig->getLogoutLink() method, when using SSL.
You can reproduce it as follows:

-          Configure a sSslShopUrl (you need to have a SSL environment set up)

-          Login and go to a product detail page

-          Logout using the logout link in the "my account" area in the header 
(not the logout button)

-          You will get a whitepage

It's quite obvious why this problem occurs. When using SSL OXID generates the 
logout link for http. To invalidate both sessions and cookies for the http and 
https domain, OXID makes a redirect on the https domain.
The oxviewconfig->getLogoutLink() method adds the "cl=details" parameter but 
does not add an "anid" parameter to the redirect URL.
The details view class now tries to perform a second redirect what leads to the 
whitepage.

I encountered the problem in a OXID 4.2 EE shop but it also present in OXID 4.3 
EE.
Maybe it's well known, but I didn't find any entry in the bugtracker.

Regards,

Sven Ferber
Junior Software Developer | Business Services
burdadigital
a hubert burda media company
www.burdadigital.de<outbind://48-00000000DFB89499778F2249948B35E5DB277DE307005FB9EA4088B2D5119A8A00306E00EB73000006DDA4F2000043C0A0A1BF2520468E42BA2FE29A99210000B50744550000/www.burdadigital.de>
Burda Digital Systems GmbH
Haid-und-Neu-Str. 7
76131 Karlsruhe

Tel: +49 (0) 781/84-5190
Fax: +49 (0) 781/84-3059
[email protected]<mailto:[email protected]>

Burda Digital Systems GmbH, Offenburg
Amtsgericht Freiburg, HRB 471696
Geschäftsführer: Gerhard Thomas

_______________________________________________
dev-general mailing list
[email protected]
http://dir.gmane.org/gmane.comp.php.oxid.general

Reply via email to