[Typo3-dev] session data persistence weirdness - my fault, or bug?

[Karsten Dambekalns]

Hi.

A FE user logs in, I set some session data that get's saved in
fe_sesson_data. Now the user logs out, another FE user logs in (same
browser, same machine, a second later).

This new user has the same session data as the one that just logged out. So
logoff() deletes the data from fe_sessions, but fe_session_data is only
cleaned with a 1% chance, not during logoff.

Is this a bug? I doubt it, because it *must* have been noticed already.
Probably my fault, but how are you solving this? Or is this related to
something going wrong with authentication services?

All on 3.7.1, with a custom authentication service.

Thanks,
Karsten
-- 
Karsten Dambekalns
TYPO3 Association - Active Member
http://association.typo3.org/