Before security warning I got this php notice with error reporting enabled:

Notice: Trying to get property of non-object in /home/example.com/public_html/includes/common.inc on line 892

Using an old firefox profile (restored from a backup) can cause security alert.

CommentFileSizeAuthor
#2 persistent_login-621916-2.patch901 bytesmarkus_petrux

Comments

markus_petrux’s picture

markus_petrux commented
Status: Active » Needs work

It seems we need to include a bit more stuff in that case.

markus_petrux’s picture

markus_petrux commented
Status: Needs work » Needs review
StatusFileSize
new persistent_login-621916-2.patch901 bytes

Apologies for the delay in this issue. Here's a patch that I think it fixes this issue. We need a full Drupal bootstrap to properly initialize the global language variable that we need to render the warning to the user, but we also need it to properly process the watchdog() request, otherwise we do not store anything because dblog module is not loaded yet. We're here processing hook_boot().

markus_petrux’s picture

markus_petrux commented
Status: Needs review » Fixed

A full Drupal bootstrap here should cause no harm and seems to fix the issue here, patch committed to CVS.

http://drupal.org/cvs?commit=311662

It should be available in 1.4 release, soon to be out.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.