CoreCommunity ExtensionsIncubatorDistributionsTYPO3 4.5 ProjectsTYPO3 4.6 ProjectsTYPO3 4.7 ProjectsTYPO3 6.0 ProjectsTYPO3 6.1 ProjectsTYPO3 6.2 Projects (+)

Bug #36334

Logout doesn't clear session cookie

Added by Stichting Kennisnet about 1 year ago. Updated about 1 month ago.

Status:New Start date:2012-04-19
Priority:Must have Due date:
Assignee:- % Done:

0%

Category:-
Target version:-
Votes: 0

Description

Cacheinfo disables cookie fe_typo_user before logging in. Works fine. But after a logout it won't unset this cookie. Those users will circumvent the Varnish cache until they reopen the browser or clear the cookies themselves. This situation disables the effect of the Varnish cache so performance suffers.

36334.diff (1.9 kB) Andri Steiner, 2013-04-11 10:16

36334_2.diff (5.8 kB) Andri Steiner, 2013-04-11 11:48

History

Updated by Arjen Hoekema 6 months ago

This could be solved by using the "logoff post processing" hook in "t3lib_userAuth" removing/clearing the session cookie after the session was deleted:

$GLOBALS['TYPO3_CONF_VARS']['SC_OPTIONS']['t3lib/class.t3lib_userauth.php']['logoff_post_processing']

Updated by Andri Steiner about 1 month ago

See attached patch

Updated by Andri Steiner about 1 month ago

Enhanced version. Patch will fail due to other pending changes in my working copy, feel free to contact me to discuss the further proceedings.

Also available in: Atom PDF