? ? Pending

User tests: Successful: Unsuccessful:

avatar wilsonge
wilsonge
3 Dec 2020

@HLeithner did basically all of the debugging work on this so massive massive credit to him! Both me and @zero-24 had unsuccessfully tried to debug this in the past.

Pull Request for Issue #28465 .

Summary of Changes

  • Double encodes the session name for compat with session names in Joomla 3
  • Ensures the code that is stored within a session namespace (concept removed in the framework) continues to function during the lifetime of J4 to allow stable upgrades from J3 (it's worth noting that in the future if users go from Joomla 3 to Joomla 4 and straight a J5 where this migration code has been removed there could be issues - but I'm taking this as another bridge for another day)
  • Removes the session migration step that was left over from 3.4.7 session security issues as we require users to go via 3.10 all users will have had their session migrated so this code is useless anyhow.

Testing Instructions

Test by upgrading from Joomla 3.x to this 4.x repo. Before you'll get logged out during the upgrade. After patch you will stay logged in

Documentation Changes Required

None

avatar wilsonge wilsonge - open - 3 Dec 2020
avatar wilsonge wilsonge - change - 3 Dec 2020
Status New Pending
avatar joomla-cms-bot joomla-cms-bot - change - 3 Dec 2020
Category Administration com_admin Libraries
avatar wilsonge wilsonge - change - 3 Dec 2020
Status Pending Fixed in Code Base
Closed_Date 0000-00-00 00:00:00 2020-12-03 00:59:55
Closed_By wilsonge
Labels Added: ? ?
avatar wilsonge wilsonge - close - 3 Dec 2020
avatar wilsonge wilsonge - merge - 3 Dec 2020
avatar wilsonge
wilsonge - comment - 3 Dec 2020

Well I didn't mean to merge this - but I managed to forget to swap branches when i started on the next batch on conflicts and git push'd it to 4.0. So I guess this is merged.... At least it get's into nightlies for testing :/

avatar infograf768
infograf768 - comment - 3 Dec 2020

It totally breaks my test site here.

Add a Comment

Login with GitHub to post a comment