0000541: wrong standard urls in oxseo table if admin area is used with SSL

ID	Project	Category	View Status	Date Submitted	Last Update

0000541	OXID eShop (all versions)	4.09. SEO, SEO URL	public	2009-01-26 13:58	2012-12-10 13:35

Reporter	andreas_ziethen	Assigned To
Priority	normal	Severity	major	Reproducibility	always
Status	resolved	Resolution	fixed
Product Version	4.0.0.2 revision 14967
Fixed in Version	4.0.1.0 revision 15990

Summary	0000541: wrong standard urls in oxseo table if admin area is used with SSL
Description	If the admin area is used under SSL, article standard links are written wrong in table oxseo. Instead of: index.php?cl=details&anid=762b1c44c95cd81dd1396b089982a568 you will find something like this: index.php?cl=force_details&anid=762b1c44c95cd81dd1396b089982a568 The "force_" string comes from function url() in class oxsession. There a parameter "force_sid=..." is added if you are in an SSL environment. Obviously the "sid=..." is removed later but thies lead to the "force_cl=..." stuff. Solution (probably): In oxsession::url() add an adin verification clause in line 403: if ($blForceSID && !$this->isAdmin()) { .... }
Tags	No tags attached.

Theme
Browser	All
PHP Version	5.2.6
Database Version	5.0.33