Zikula Community

• ntward
  
  

  • Rank: Registered User
  • Registered: Jan 28, 2007
  • Last visit: Apr 16, 2009
  • Posts: 43

  Posted: Mar 17, 2007 - 11:57 PM

  Hi,
  I'm struggling with a session bug that apparently no one can reproduce - so it's low priority. It's really annoying though!
  Can anyone else reproduce it?
  To reproduce:
  -You must have register globals on
  -Have the Users login block active on your homepage
  -Login, go to Admin -> Settings -> Security options, then set 'Duration until users become inactive' to 1 minute (this just speeds things up).
  -Now logout, and wait over 1 minute.
  -Refresh the homepage.
  
  Do you see a 'Session initialisation failed' message in the Users login block? What version of PHP are you using?
  
  
  I have a good idea of the order of events, but don't know why it happens. When this occurs when you are logged in, you get a nice neat message telling you that your session expired, rather than this mess...
  
  Thanks for any help

  • 
  •  
• drak
  
  

  • Rank: Software Foundation
  • Registered: Jul 21, 2001
  • Last visit: May 31, 2010
  • Posts: 624

  Posted: Mar 18, 2007 - 09:57 PM

  Just to let you know I'm following the thread. This is .8 specific. I'd be keen to see if this is PHP version related and upping to 4.3.3 or higher may solve the problem although we do not recommend 0.8 on PHP less than 4.3.11 I believe (although saying that some enterprise linux version run lower PHP version but are still patched to incorporate the latest security fixes - since they dont have the new features they are numbered a.b.c-x)
  
  Drak
  
  --
  Zikula Lead Developer
  Board Member of the Zikula Foundation
  Follow me on twitter.com/zikuladrak

  • 
  •  
• Landseer
  
  

  • Rank: Team Member
  • Registered: Jan 02, 2003
  • Last visit: Oct 21, 2009
  • Posts: 800

  Posted: Mar 19, 2007 - 04:00 AM

  Quote

  -You must have register globals on

  
  
  Stop.
  
  There is no need for register_globals on in PostNuke, the baseline security analyzer warns you if it detects this setting (both in .764 and .8). If this solves your problem, turn it off.
  
  
  
  
  --
  "He is not dangerous, he just wants to play...."

  • 
  •  
• ntward
  
  

  • Rank: Registered User
  • Registered: Jan 28, 2007
  • Last visit: Apr 16, 2009
  • Posts: 43

  Posted: Mar 19, 2007 - 04:46 AM

  Yes, but I don't have the option to turn it off, otherwise I would.
  
  So I thought I'd try and chase this up on behalf of those that can't turn it off. PN should function correctly with it on, no? If it's not meant to, then fair enough...

  • 
  •  
•  
•  

Users on-line

• mazdev,
• mesteele101

This list is based on users active over the last 60 minutes.