[#11754] - Remember me and mod_logged
- Closed
- 6 Oct 2016
- Medium
- Build: master
- # 11754
Steps to reproduce the issue
Log in to front end marking "Remember me".
Close browser.
In a different browser, in backend, mod_logged, click to log the user out so it does not show in the list.
Open browser again and go to site. User is logged in.
Expected result
User shows in mod_logged user list, as he is logged again.
Actual result
User does not show up in mod_logged user list
System information (as much as possible)
New Joomla 3.6.2 for testing.
Additional comments
It seems session table in database is not updated with the user info, leaving entry as guest.
This may be related to #11541 , although I have not investigated it.
| Status | New | ⇒ | Confirmed |
Moving to confirmed.
This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/11754.
Btw can this also be reproduced on staging?
Another similar case as this reported issue.
Login as admin in backend.
Login as user in frontend, don't check 'Remember me'.
Go to the backend again, logout the user by clicking the red X. The user disappears from the list of logged in users.
Go to the frontend again, the user is still logged in.
The behaviour I see is also some kind of similar as reported in #11756.
This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/11754.
FYI:
... 11756 was closed because "expected behavior with keepalive forms".
Hi.
I don't think it is related to these issues. Those are about logout.
This one is about "remeber me" option not changing session table.
When you log in normally in front end, session table will have row with guest=0, userid=user id of logged user.
When you log in with "remember me" and then you close the browser, clean session table, and go back to the site:
- you are correctly logged in
- but the session table is not updated, and there is not row with guest=0, userid=user id of logged user.
As the mod_logged module checks the session table to know logged in users, it does not show the ones logged through "remember me".
So, problem is not with mod_logged, but instead with "remember me" not updating session table when login by cookie happens.
Please let me know if I can provide any more info.
Please test with the 3.6.3 RC. We made a couple of changes (after one of the security improvements from 3.6.1) related to how the metadata in this table is populated.
Thank you. I just tested with 3.6.3 RC2 and it is now working fine.
| Status | Confirmed | ⇒ | Closed |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2016-10-06 15:20:34 |
| Closed_By | ⇒ | mbabker |
I have followed above steps and able to reproduce this issue.
This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/11754.