Hello Oyku,
On Tuesday, February 25, 2003, Oyku Gencay wrote...

> I can assure you that none of the users have logged from the same
> computer. Some don't know each other.

> To give a hint, this happens uring the busy hours. Might be a coincidence
> but it attracted my attention.

Are you 100% sure that is the case?  I've had reports of sessions
merging on the same computer... I understand how... but from different
computers?  Are you running *any* kind of caching engine, such as Zend
or anything like that?

> Can you give some detail about the issue? Although I didn't look SM
> source except for fixing some problems in i18n.php (this is another
> story) maybe I can give a hand.

Okay... details on the problem... The way we have sessions going, the
session ID is stored in a cookie... when you go to the login screen,
it is supposed to destroy the session, and they cookie... the problem
seems to be, even if the session is destroyed, it still has the
session ID in memory somewhere (maybe browser or something)... so when
the second person goes to login, it still has the session ID for the
first person... the second person then makes his own session, with the
first persons session ID, so person 1 has session ID, abc123, person
2 has the same ID.  Login goes all well etc etc... When person 1 goes
to do anything new, because his session was killed off, *but* there is
a session running with the session ID abc123, PHP doesn't know... so
picks up the new session.  This results in person 1 now being logged
in as person 2.  Person 1's preferences are now trashed because the
details messed everything up... That is basically the problem we're
seeing... What you described was something a *lot* more serious... and
if that is happening independent of any caching engine, then I think
PHP is messing up somewhere.

-- 
Jonathan Angliss
([EMAIL PROTECTED])



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
--
squirrelmail-users mailing list
List Address: [EMAIL PROTECTED]
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to