Wednesday, September 7, 2011

Custom Session Handler and ini_restore('session.check_referer') does not work

Hi there,

I've got some issues with login a user from an external domain,
because of the ini_set('session.check_referer',$this->host) on core
session class.

So I've created my custom session handler file, like example in the
book:
http://book.cakephp.org/view/1310/Sessions

But even with this custom config, referer is checking and my
authentification fails...
The only way to avoid this checking is to turn session level on to
"low" in config/core.php

Have you any idea why the ini_restore('session.referer_check'); does
not work?
I've tried ini_set('session.referer_check', ''); too, without
success...

I'm using Cakephp 1.3.8, PHP Version 5.3.2-1ubuntu4.9.1

Cheers,

Avairet

--
Our newest site for the community: CakePHP Video Tutorials http://tv.cakephp.org
Check out the new CakePHP Questions site http://ask.cakephp.org and help others with their CakePHP related questions.


To unsubscribe from this group, send email to
cake-php+unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/cake-php

No comments: