[TYPO3-core] RFC #10205: DB session record is only created when user is authenticated

Martin Kutschker masi-no at spam-typo3.org
Sat Jan 24 11:59:45 CET 2009


Marcus Krause schrieb:
> 
> No, this hasn't changed and will not change with this patch. Only
> session ids of authenticated users are written to be/fe_sessions table.
> 
> Due to this, sids change during an user's requests and in our case
> commerce isn't able to keep a relationship between a user and its basket.

SIDs change when switching from unauthenticated (not logged in) to
authenticated  (logged in) state? Or are there random SID changes if
you're not logged in.

I don't think that "commerce" is the only extention that has problems if
a SID changes "randmomly". It's important that the SID stays the same if
a login occurs. There must be no need for hooks or any other magic.

Masi


More information about the TYPO3-team-core mailing list