[Phpgroupware-tracker] [Bug #1785] Wrong path specification in cookies

[nobody]

=================== BUG #1785: LATEST MODIFICATIONS ==================
http://savannah.gnu.org/bugs/?func=detailbug&bug_id=1785&group_id=509

Changes by: Dave Hall <address@hidden>
Date: 2002-Nov-23 21:09 (Australia/Melbourne)

            What     | Removed                   | Added
---------------------------------------------------------------------------
         Assigned to | None                      | skwashd


------------------ Additional Follow-up Comments ----------------------------
Work was done sometime ago on refining phpgw's implementation of cookies.  The 
cookies set by phpgw are now domain cookies.  Can you please answer the 
following questions to assist us in further refinement:

* what cookies are set/read by mailman?

* is there a compelling reason why you need to use cookies for passing phpgw 
session data?

* when did you last run a cvs update?

Cheers



=================== BUG #1785: FULL BUG SNAPSHOT ===================


Submitted by: None                      Project: phpGroupWare                   
Submitted on: 2002-Nov-23 12:25
Category:  API - phpGWapi               Bug Group:  0.9.14 release              
Severity:  5 - Major                    Priority:  High                         
Resolution:  None                       Assigned to:  skwashd                   
Status:  Open                           Component Version:  CVS                 
Platform Version:  BSD                  Reproducibility:  Every Time            

Summary:  Wrong path specification in cookies

Original Submission:  phpgw sets cookies after user login. But all cookies are 
set to path '/' which may differ from actual installation.

This path is hardcoded in phpgwapi/inc/class.sessions_*.inc.php in function 
phpgw_setcookie(). The correct behaviour should be extracting path from 
$GLOBALS['phpgw_info']['server']['webserver_url'].

In my particular case phpgw installation interfered with mailman installation 
on the same server. Mailman does not allow setting of cookie `domain', but as 
phpgw set it with path '/', mailman received it and signalled an error.

Follow-up Comments
*******************

-------------------------------------------------------
Date: 2002-Nov-23 21:09             By: skwashd
Work was done sometime ago on refining phpgw's implementation of cookies.  The 
cookies set by phpgw are now domain cookies.  Can you please answer the 
following questions to assist us in further refinement:

* what cookies are set/read by mailman?

* is there a compelling reason why you need to use cookies for passing phpgw 
session data?

* when did you last run a cvs update?

Cheers


CC list is empty


No files currently attached


For detailed info, follow this link:
http://savannah.gnu.org/bugs/?func=detailbug&bug_id=1785&group_id=509