[TYPO3-core] RFC: #10266: Bugfix: No user authentication for >1 TYPO3 installation under one domain

[Christian Kuhn]

Committed to

* 4.1 (r5299, 10266_v3_41.diff)
* 4.2 (r5300, 10266_v3.diff, without test)
* trunk (r5301, 10266_v3.diff)

Regards
Christian


Marcus Krause wrote:
> Hi,
> 
> This is SVN patch request.
> 
> Type: Bugfix
> 
> Bugtracker references:
> http://bugs.typo3.org/view.php?id=10266
> 
> Branches: trunk, 4-2, 4-1
> 
> 
> Problem:
> TYPO3 sets cookies with path variable = '/'. This prevents users to
> login to more than one TYPO3 instance on one domain.
> Given a setup like
> example.org/cms1
> example.org/cms2
> where in cms1 and cms2 are two different TYPO3 instances reside. Cookies
> from cms1 will overwrite those from cms2 vice versa
> 
> Solution:
> Apply paths to setcookie() calls whenever possible.
> 
> 
> Note:
> The attached patch introduces a new IndpEnv 'TYPO3_SITE_PATH' for
> t3lib_div::getIndpEnv().
> In addition a unit testcase is added for it.
> Patch has been made against trunk.
> For the 4-1 and 4-2, obviously the testcase has to be removed.
> 
> 
> Marcus.
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Before posting to this list, please have a look to the posting rules
> on the following websites:
> 
> http://typo3.org/teams/core/core-mailinglist-rules/
> http://typo3.org/development/bug-fixing/diff-and-patch/ 
> _______________________________________________
> TYPO3-team-core mailing list
> TYPO3-team-core at lists.netfielders.de
> http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-team-core