Download & Extend

Session cookie set for anonymous users

Project:Advanced User
Version:7.x-3.x-dev
Component:Code
Category:bug report
Priority:major
Assigned:Unassigned
Status:fixed

Issue Summary

In my sites, advuser is not enabled for any user roles; I use it only as admin.

I was very surprised, therefore, to find a session cookie set for anonymous users.

It looked like this:

[advuser] => Array
    (
        [accounts] => Array
            (
            )
        [deselected] => Array
            (
            )
        [filters] => Array
            (
            )
        [phase] => Array
            (
                [id] => 0
            )
        [return] =>
        [selectall] =>
    )

I have now disabled the module and the cookie is gone but I am interested in using it again once this is resolved.

Comments

#1

Priority:normal» major

Thanks for the report. I'll see if I can get to it soon but probably not before the end of the year.

#2

Version:6.x-3.0-alpha1» 7.x-3.x-dev
Status:active» needs review

Setting sessions for anonymous users breaks Varnish, which can have a major performance impact on sites that make use of Varnish for caching anonymous requests.

Patch to advuser_init() attached. Patch against 7.x-3.x-dev; this patch applies to 6.x-3.x-dev as well.

AttachmentSize
advuser_sessions-1261912-2.patch 1.28 KB

#3

Status:needs review» reviewed & tested by the community

I like this patch.

#4

I've committed this patch to the 6.x-3.x-dev version at http://drupalcode.org/project/advuser.git/commit/9a9c8b1 and will do the same for 7.x-3.x-dev soon.

#5

Status:reviewed & tested by the community» fixed

http://drupalcode.org/project/advuser.git/commit/7d1fb54

nobody click here