Sunday, September 26, 2010

Re: Auth logs user out when clicking new link before page load

On 25 Sep., 23:39, paulinthought <paulgrat...@gmail.com> wrote:

> If I click a link to load a page and then click another link for a
> different page on a different model then before the page has changed
> to the initially requested page the application instead redirects me
> to the login screen.

With the default security level (configured in app/config/core.php),
the session ID is regenerated between each request, so this may
happen:
1. You send a request with the current session ID.
2. The server generates a new session ID.
3. You click again before the page is loaded, and then send a request
with the old session ID.

Since the server has discarded the old session ID, it will treat you
as a new user and redirect you to the login form.

I have not found other solutions than lowering the security level.

Regards

Jonathan

Check out the new CakePHP Questions site http://cakeqs.org and help others with their CakePHP related questions.

You received this message because you are subscribed to the Google Groups "CakePHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to
cake-php+unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php?hl=en

No comments: