[TYPO3-dev] Session Fixation "Feature" -> breaks Session Handling

Martin Kutschker masi-no at spam-typo3.org
Wed Mar 4 10:27:21 CET 2009


Christopher Lörken schrieb:
> 
> This behavior is caused by the session fixation code as you have
> correctly identified. The session id only stays static for logged in users.

As far as I understood you can fix the session id for anonymous users
when you store something in the session data. So I wonder why this
doesn't work more. Maybe you have to set the data via the API.

Masi




More information about the TYPO3-dev mailing list