[TYPO3-dev] Solving existing session problems - sole technical approach

Marcus Krause marcus#exp2009 at t3sec.info
Wed Jan 28 20:02:49 CET 2009


Marcus Krause schrieb am 01/28/2009 07:49 PM Uhr:
> Hi!
>
> This is an approach to solve these issues. Please report your problems
> here but provide as much details as possible!!!!!!

What I isolated so far:

(1)
According to [1], FF and IE treat cookies different. It seems the
problem occurs when domain and according subdomains are involved.
We have to reproduce this and check out what the rfc behaviour is.
In case we have
 - cookie A for example.org
 - cookie B for .example.org
 - cookie C for sub.example.org

For a request on sub.example.org, does the browser sends all of them, or
if not, which one overwrites which ones?


(2)
According to [1], when using a multidomain setup in TYPO3 with a
redirect (via TYPO3 domain record), TYPO3 seems to issue a session for
the to be redirected domain. If this is the case, I would would describe
it as bug.


Marcus.




[1] http://bugs.typo3.org/view.php?id=10261




More information about the TYPO3-dev mailing list