Force Expiry of "alc_enc" Cookie if autoLogin() failed
40 views
Skip to first unread message
Stefan
Feb 12, 2014, 9:12:58 AM2/12/14
to silverst...@googlegroups.com
Hi all!
While I was searching an annoying caching bug in our application I stumbled across the autoLogin() method of the Member class.
As I can see if an auto login fails, the "alc_enc" cookie is never deleted/expired. So on every subsequent request, the application is again trying to login the user.
I think this could be fixed easily by adding an else clause where the cookie is force_expiry()d
Is it possible to fix this for the next 3.1.X release? ;)
Thanks a lot!
Stefan
While I was searching an annoying caching bug in our application I stumbled across the autoLogin() method of the Member class.
As I can see if an auto login fails, the "alc_enc" cookie is never deleted/expired. So on every subsequent request, the application is again trying to login the user.
I think this could be fixed easily by adding an else clause where the cookie is force_expiry()d
Is it possible to fix this for the next 3.1.X release? ;)
Thanks a lot!
Stefan
Daniel Hensby
Feb 13, 2014, 6:08:38 PM2/13/14
to silverst...@googlegroups.com
This makes sense, why not create a PR?
Reply all
Reply to author
Forward
0 new messages