Project

General

Profile

Actions

Bug #20424

closed

Built In shopping basket is not working

Added by Mathias Schreiber almost 15 years ago. Updated almost 14 years ago.

Status:
Closed
Priority:
Should have
Assignee:
Category:
Communication
Target version:
-
Start date:
2009-05-14
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
4.2
PHP Version:
5.2
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

The built in shopping basket is being blocked by the session fixation fix.
By default (and manual) the FE waits for the GPVar "recs" and then automatically stores things in the session.
Unfourtunately the session fixation fix changes the cookieId and id of the fe_user record to different values.
The tslib_feuserAuth::record_registration function check whether these values are the same (which the fixation fix denies).

Ingmar and I thought about this and we want to remove the check in record_registration.
Will attach patch soon (maybe after the coding night)

PHP:
/** * Enter description here... *
*/
class user_pleaseMichiel {
public function justdoItDontAsk($content, $conf) {
debug($GLOBALS['TSFE']->fe_user->sesData);
}
}
?>

=========
TS:
config {
doctype = xhtml_trans
xmlprologue = none
xhtml_cleaning = all
}

  1. Default PAGE object:
    page = PAGE

page.10 = TEXT
page.10.value (
<form action="index.php" method="post">
<input field="hidden" name="recs[tt_content]1" value="3" />
<input type="submit" name="submit" value="machma" />
</form>
)

page.includeLibs.myFunc = fileadmin/neverstorephphere/user_doesntmatter.php
page.20 = USER_INT
page.20.userFunc = user_pleaseMichiel->justdoItDontAsk

========
See if there is data in the session.

(issue imported from #M11089)


Files

11089.diff (739 Bytes) 11089.diff Administrator Admin, 2009-05-15 23:52
T3X_shoppingbaskettest-0_0_0-z-201001171910.t3x (5.93 KB) T3X_shoppingbaskettest-0_0_0-z-201001171910.t3x Administrator Admin, 2010-01-17 19:10

Related issues 3 (0 open3 closed)

Related to TYPO3 Core - Bug #19908: session fixation fix avoid BE loginClosedOliver Hader2009-01-25

Actions
Related to TYPO3 Core - Bug #19831: Session fixation vulnerability in user authenticationClosedMarcus Krause2009-01-15

Actions
Has duplicate TYPO3 Core - Bug #20290: Adding entries to recs[]-Array not workingClosedChristian Kuhn2009-04-07

Actions
Actions #1

Updated by Benni Mack over 14 years ago

More information about the functionality of the basket here:

http://typo3.org/documentation/document-library/core-documentation/doc_core_tsref/4.3.0/view/1/13/#id2539088

Also, check my demo extension to set a value to the shopping basket

Actions #2

Updated by Benni Mack over 14 years ago

Committed to trunk (rev. 6803)
Committed to TYPO3_4-3 (rev. 6804)
Committed to TYPO3_4-2 (rev. 6805)

Actions

Also available in: Atom PDF