Monday, February 10, 2014

Session Problems due to browserconfig.xml

Hi All,

We noticed a strange behavior where users reported that their session is timing out abruptly. On debugging the issue, we found the following behavior.

When the user keeps working on different sections of the application, the same CAKEPHP session id is being send as a part of the header (we got it through apache logs).

But there is a 404 request to browserconfig.xml. We don't have this file in our root. 
When this call is made, a 404 response is given back, but the cakephp also gives back a new session id. The next request from this user comes with this new id and it finds this to be a session missing and logs the user out of the system.

What could be the reason for this??

HTTP : Log 

"GET /browserconfig.xml HTTP/1.1" 404 158 

User Agent:

"-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; Trident/7.0; Touch; MDDCJS; rv:11.0) like Gecko" 

HTTP Header:

"_mkto_trk=id:895-WNT-152&token:_mch-greatplacetowork.com-1389204011408-64400; __utma=188050558.2113426640.1389215158.1391549861.1391919029.7; __utmz=188050558.1391919029.7.6.utmcsr=culturesurvey.greatplacetowork.com|utmccn=(referral)|utmcmd=referral|utmcct=/Pages/sessionTimeOutPage/; __qca=P0-981991203-1389215159220; CAKEPHP=pko85qkvb33iqq08aeip1l9t07" 

HTTP Response:

"CAKEPHP=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/, CAKEPHP=vfnpkrkpd0a8fllgskofs8bgs7; expires=Mon, 10-Feb-2014 03:36:59 GMT; path=/; HttpOnly"


Regards,
Thyagarajan D.

--
Like Us on FaceBook https://www.facebook.com/CakePHP
Find us on Twitter http://twitter.com/CakePHP
 
---
You received this message because you are subscribed to the Google Groups "CakePHP" group.
To unsubscribe from this group and stop receiving emails from it, send an email to cake-php+unsubscribe@googlegroups.com.
To post to this group, send email to cake-php@googlegroups.com.
Visit this group at http://groups.google.com/group/cake-php.
For more options, visit https://groups.google.com/groups/opt_out.

No comments: