TYPO3 Core

In some versions of Internet Explorer the user is logged out, if he loads a page which is accessed with an URL which contains a directory
For example:
- http://www.domain.com/mypage.html WORKS
- http://www.domain.com/subdirectory/mypage.html WORKS

For me both URLs work, for one associate it doesn't work in compatibility mode, for another associate it doesn't work in IE8 Standards mode, nor in compatibility mode. If Private-Browsing Mode is used, it works fine for both of them and they are not logged out. We compared security settings and other options of IE, but we found no difference.

We already tried modifying the cookieDomain setting with no success. Also the ".domain.com" as cookieDomain did not work.

Interesting about it: In IE8s developer tools, the cookies are shown with the domain ".com". In FF the cookies have www.domain.com as cookie domain.

We tried to locate, where the cookie is deleted and found out, that it's in t3lib/class.t3lib_userauth.php on line 795 (TYPO3 4.3.3). It's the second call to $this->logoff() at the bottom of the function fetchUserSession() which deletes the cookie.

(issue imported from #M15427)