0004560: Session size might exceed column limit when using database for session storage

ID	Project	Category	View Status	Date Submitted	Last Update

0004560	OXID eShop (all versions)	4.02. Session handling	public	2012-09-26 10:46	2014-02-18 16:46

Reporter	michael.gerhardt	Assigned To
Priority	high	Severity	major	Reproducibility	sometimes
Status	resolved	Resolution	fixed
Product Version	4.4.8 revision 34028
Target Version	4.7.0_5.0.0_beta3	Fixed in Version	4.7.0_5.0.0_beta3

Summary	0004560: Session size might exceed column limit when using database for session storage
Description	When using database to store sessions ($this->blAdodbSessionHandler=true), the size of the session data might easily exceed the limit of the column "session_data". This column has the type "TEXT", which can hold up to 65.535 characters. Depending on the configuration of the shop and the modules that are used, the session data can become larger. Just entering the shop and putting one article into the basket leads to a session size of around 13.500 chars (in our configuration). When the session data limit is exceeded, the behaviour of the shop is unpredictable. Default column type should be "MEDIUMTEXT" to have a limit of 16.777.215 characters.
Tags	No tags attached.

Theme	Both
Browser	All
PHP Version	any
Database Version	any

saulius.stasiukaitis 2012-11-23 14:34 reporter ~0007969	As this SQL query are put to database by user, we need to ensure that we have correct documentation.