[ic] Session ID supression causes Javascript to fail

Kevin Walsh kevin at cursor.biz
Mon Jul 31 14:59:37 EDT 2006


"Paul Jordan" <paul at gishnetwork.com> wrote:
> OK, I am sure I am in for a beating with the dum dum stick this time. I no
> longer have a problem, but would like to understand what is going on.
> 
> I have two catalogs. In catalog A, I have a system that among other things,
> had:
> ScratchDefault  mv_no_session_id  1
> ScratchDefault  mv_no_count       1
> 
> For whatever reason, once I logged into my custom backend, sessionID's and
> mv_pc would appear in the URL's. I really didn't care in the backend.
> Everything worked great.
> 
> I copied this backend into Catalog B. It also had:
> ScratchDefault  mv_no_session_id  1
> ScratchDefault  mv_no_count       1
> 
> However, links that were launched via Javascript (href's were good, just no
> &id=) would go to the special_pages/missing.html. I could not figure out why
> for hours. I did notice however, in this backend (catalog B) I was not
> getting &id= and &mv_pc in my URL's. So, I:
> 
> ScratchDefault  mv_no_session_id  0
> ScratchDefault  mv_no_count       0
> 
> This fixed it. However, I am left with two questions.
> 
> 1. is the session_id required in href's launched from Javascript?
> 
> 2. What would cause a catalog (in this case Catalog A) to show &id= after
> login, but not before - or, if that is expected, what would cause &id= to
> NOT show up after login, as in Catalog B?
> 
Firstly, the problem of session IDs re-appearing after login, despite
the mv_no_session_id setting, has been fixed in Interchange 5.5.0.
the fix can be easily backported to 5.4, and probably to earlier versions
too.  The addition of a session ID in the URI, when it is not required,
doesn't cause problems - it just doesn't look very "clean".

The session ID in all URIs is important (essential) if the user has
session cookies switched off for some reason, and that goes for
JavaScript-generated URIs too.

-- 
   _/   _/  _/_/_/_/  _/    _/  _/_/_/  _/    _/
  _/_/_/   _/_/      _/    _/    _/    _/_/  _/   K e v i n   W a l s h
 _/ _/    _/          _/ _/     _/    _/  _/_/    kevin at cursor.biz
_/   _/  _/_/_/_/      _/    _/_/_/  _/    _/


More information about the interchange-users mailing list