View Issue Details

IDProjectCategoryView StatusLast Update
0004953OXID eShop (all versions)4.04. Securitypublic2013-02-22 15:30
Reporteraggrosoft Assigned To 
PrioritynormalSeverityminorReproducibilityalways
Status resolvedResolutionno change required 
Summary0004953: User with installed chrome frame plugin loose session
DescriptionIn some cases users surfing the website with google chrome frame - or other plugins that change the user-agent - will loose their session. This is due to the weird behavior of the plugin which changes the user agent sometimes. In oxid the User-Agent check is turned on by default, which would not be the problem, but there is no way to disable this check.

Please give us an option to disable this check.
Steps To ReproduceUse Internet Explorer 8
Install GCF
Use any ajax type of request that requires a session to be used
Session will break as of switched user agent which recreates session
Additional InformationSee:

http://stackoverflow.com/questions/7969719/cakephp-cookie-session-problems

https://sites.google.com/a/chromium.org/dev/developers/how-tos/chrome-frame-getting-started/understanding-chrome-frame-user-agent

TagsNo tags attached.
ThemeBoth
BrowserInternet Explorer 9.x, Internet Explorer 8.x, Internet Explorer 7.x, Internet Explorer 6.x or older
PHP Versionany
Database Versionany

Activities

Linas Kukulskis

2013-02-22 15:30

reporter   ~0008449

oxSession::_checkUserAgent() method compares UA info and is used in oxSession::_isSwappedClient() method;