View Issue Details

IDProjectCategoryView StatusLast Update
0000541OXID eShop (all versions)4.09. SEO, SEO URLpublic2012-12-10 13:35
Reporterandreas_ziethen Assigned To 
PrioritynormalSeveritymajorReproducibilityalways
Status resolvedResolutionfixed 
Product Version4.0.0.2 revision 14967 
Fixed in Version4.0.1.0 revision 15990 
Summary0000541: wrong standard urls in oxseo table if admin area is used with SSL
DescriptionIf the admin area is used under SSL, article standard links are written wrong in table oxseo. Instead of:

index.php?cl=details&anid=762b1c44c95cd81dd1396b089982a568

you will find something like this:

index.php?cl=force_details&anid=762b1c44c95cd81dd1396b089982a568

The "force_" string comes from function url() in class oxsession. There a parameter "force_sid=..." is added if you are in an SSL environment. Obviously the "sid=..." is removed later but thies lead to the "force_cl=..." stuff.

Solution (probably):
In oxsession::url() add an adin verification clause in line 403:
if ($blForceSID && !$this->isAdmin()) {
   ....
}
TagsNo tags attached.
Theme
BrowserAll
PHP Version5.2.6
Database Version5.0.33

Activities

There are no notes attached to this issue.