Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Logout in Frontend creates not necessary cookies #54

Open
calien666 opened this issue Jun 28, 2021 · 2 comments
Open

Logout in Frontend creates not necessary cookies #54

calien666 opened this issue Jun 28, 2021 · 2 comments
Assignees
Labels

Comments

@calien666
Copy link

Our customer found out, after logging out from TYPO3 frontend, two Cookies are set.

After searching inside the code, I recognized the hook, deleting the PhpMyAdmin cookie starts a new session and sends out the PHPSESSION and PhpMyAdmin cookie to the browser.

The class BeUserAuthLogOffHook should recognize, if the logout was sent from frontend or backend and should ignore logouts from frontend, because the hook $GLOBALS['TYPO3_CONF_VARS']['SC_OPTIONS']['t3lib/class.t3lib_userauth.php']['logoff_post_processing'] is called both in frointend and backend inside the AbstractUserAuthentication working with frontend and backend logins.

Since TYPO3 doesn't send cookies from v7 up, if they are not necessary, it would be fine, if other extensions do the same.

See: https://forge.typo3.org/issues/94362

@williamdes
Copy link

If you think it is an upstream bug, feel free to report it to our GitHub tracker :)

@bmack
Copy link
Contributor

bmack commented Nov 25, 2021

I guess this is now fixed by #57 - sorry I created the PR because my customer reported it, but I didn't look at the open issues before.

@abeutel abeutel added the bug label Nov 25, 2021
@abeutel abeutel self-assigned this Nov 25, 2021
@abeutel abeutel added this to the phpMyAdmin 6.0 milestone Nov 25, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

4 participants