TYPO3 Core

Hi Tomas,

But none of my extensions installed contains session_start() niegther in ext_localconf.php or ext_tables.php, or in the extensions in generel.

Could you provide the list of installed extensions from your localconf.php?

1) Why check for defined, but not if empty?

2) Should there be a patch/bug report? A quick solution that works for me is to edit the line to following:

" } else if (defined('SID') && strlen(SID) >= 0) {"

I'm quite sure its not the prettiest way to fix this, but it works, and i'm quite confused right now.
3) Is it me that have miss the overview of how this is surposed to work?

Any hints, suggestion etc are very welcome. I'm quite confused on this topic.

Have a look at the php docs [1]:

Alternatively, you can use the constant SID which is defined if the session started. If the client did not send an appropriate session cookie, it has the form session_name=session_id. Otherwise, it expands to an empty string. Thus, you can embed it unconditionally into URLs.

IMO there is no need for an additional check or patch, because the session should not be started at that point of the process. So there must be another place within your system where the session is started before.

HTH
Patrick

[1] http://php.net/manual/en/session.idpassing.php

This task can be removed.

There was an session_start() in an included library which i didn't find searching through the solution.

Sorry for trouble.