[TYPO3-dev] Problem with RSAAuth extension

Zachary Davis zach at castironcoding.com
Thu Oct 20 15:31:04 CEST 2011


Helmut Hummel wrote:

>
> So we accept this breaking change and the preformance problems instead
> of fixing the session check properly in rsaauth? [1]
>

Even if we check properly in rsaauth, we still have a problem. The real 
problem isn't rsaauth. The real problem is that index_ts.php writes data 
to $_SESSION without having called session_start. If session_start gets 
called later, that data (which, as I mentioned, may not even matter) 
gets lost.

Zach



More information about the TYPO3-dev mailing list