[TYPO3-dev] Session Fixation "Feature" -> breaks Session Handling

Martin Holtz typo3 at martinholtz.de
Sat Nov 14 18:48:12 CET 2009


Hi Steffen,

do you really do it this way?

>>> There was the simple solution to name an input-field in an special
>>> syntax:
>>>
>>> <form method="post">
>>> <label for="test">Namen eingeben:</label>
>>> <input id="test" type="text" value="" name="recs[ts][name]"
>>> action="###URL###" />
>>> <input type="submit" />
>>> </form>
>>>
>>> That stores the value in the session.
>>>
>>> With
>>>
>>> 10 = TEXT
>>> 10.data = TSFE:fe_user|sesData|recs|ts|name
>>>
>>> i can read it out.

do you have logged in users?
do you use some other scripts to put additional informations into the 
session?

thanks,
martin

-- 
http://blog.martinholtz.de
http://wiki.typo3.org/Ts45min - TypoScript in "45" Minutes
http://wiki.typo3.org/De:ts45min - (auch in Deutsch)





More information about the TYPO3-dev mailing list