When I try to update my 4.5.4 version of drupal to 4.5.5 it does a number of strange things:

1) there is no database change, or the update.php thinks that there shouldn't be.
2) The sessions system breaks, if you try to log out, it does not destroy the session, if you forcibly use a cookie manager to remove the session cookie, next time you log in it will log you in as the next person down in the user table.

for instance if you username is 'admin' witha uid of 1, when you try to log in it will log you in as 'beth' uid of 2.

Has this happened to anyone else? I cant find anything to help.

Thanks

Miles

Comments

Cvbge’s picture

Cvbge commented

Hi, I think it's because of this change in session.inc:

 function sess_destroy($key) {
-  db_query("DELETE FROM {sessions} WHERE sid = '$key'");
+  db_query("DELETE FROM {sessions} WHERE sid = '%d'", $key);
 }

I think it'll be fixed if you chang %d to %s.

There might be other errors, so maybe try using DRUPAL-4-5 from cvs. It contain additional fixes.

dopry’s picture

dopry commented
Status: Active » Fixed

fixed in 4.5.6.
http://cvs.drupal.org/viewcvs/drupal/drupal/includes/session.inc?r1=1.8&...

Anonymous’s picture

(not verified) commented
Status: Fixed » Closed (fixed)