6.14 to 6.15 problem with cookies

[electroh]

Bernie

I think this is an Actinic issue, as ultimately Actinic creates the session file, and a fix is required to stop the BASEURL being changed by external agents.

Richard

[Nadeem]

Hi Richard

I am getting this checked by our development team

Kind Regards

[Nadeem]

Hi Richard

Just found out that this is a bug within v6.1.5. Attach to this thread is a fixed session.pm. The fix will be that the basehref does not get constructed from a script link.

Please place this file within your site1 folder and refresh

Kind Regards

[electroh]

Many thanks Nadeem

Richard

[Mike Hughes]

nadeem,

Only 6.1.5 or does it exist in earlier versions of V6?

Mike

[cdicken]

It's in all v6s. It is not fixed until 7.0.2.

[scottish]

Negative to the session.pm fix.

We tried this on 2 of our sites - in both cases a text link to the catalog on the Brochure page works OK (as before) but the image link from the menu (which first checks the existence of Customer Accounts) returns a 500 Internal Server Error.

Reinstating the old Session.pm file clears this error.

Please advise.

[Nadeem]

Hi Bernie

Are you using 6.1.5 version? The session fix is only for 6.1.5?

Please advise

Kind Regards

[scottish]

Nadeem: we are using an early version 6 - I took Chris Dicken's post to imply that the fix was for all these. Is there a replacement seeesion.pm file for earlier versions.

One of the questions that I previoulsy asked was whether the problem experienced by 'electroh' was the same as I had raised in the Developers forum. Is that the case?

Thanks

Bernie

[Nadeem]

Hi Bernie

Please could you advise what your version is.

Go to "Help | About... "

and provide the exact version number. As the session file may be different

Kind regards

[scottish]

Nadeem: our sites are based on Developer 6.0.2.0.0.0.CNNA

Regards

Bernie

[Nadeem]

Hi there Bernie

I'm afraid you would need to upgrade to 6.1.5 then apply the session file fixed, which is attached to this thread. There are some major changes between 6.0.2 and 6.1.5

Kind Regards

[scottish]

Thanks Nadeem - a very old problem has finally been solved.

Best wishes

Bernie

[Mike Hughes]

I just upgraded from 6.1.3 to 6.1.5 which mostly went OK (although I did have to copy over the *.pl and *.pm files for one of my sites).

The question I have is whether the google patch is recommended or not?. I downloaded it but winzip complains that it's corrupted and won't open it.

Any comments?

Mike

[Nadeem]

Hi Mike

I have reuploaded the fix now. I think it got corrupted, when we moved the server across. With regards to the recommendation of a the google patch, all i can say is that some people do use this, so it might be useful.

Kind Regards