Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[5.1] cookie domain incorrect for session cookie only #43309

Open
lancedouglas1 opened this issue Apr 18, 2024 · 0 comments
Open

[5.1] cookie domain incorrect for session cookie only #43309

lancedouglas1 opened this issue Apr 18, 2024 · 0 comments

Comments

@lancedouglas1
Copy link

Steps to reproduce the issue

  • Install Joomla 5.1.0
  • Configure the global->site->cookie_domain to .yourdomain (including the preceding dot).
  • Save, logout, launch incognito, different browser, or clear cache and restart browser to ensure you're getting the latest cookie.
  • Visit and login to the frontend or admin section of website.
  • Check the cookies in developer tools.

Expected result

  • Joomla session cookie with domain= .yourdomain (including preceding dot)
  • joomla_user_state cookie with domain= .yourdomain (including preceding dot)

Actual result

  • Joomla session cookie with domain= yourdomain (without preceding dot)
  • joomla_user_state cookie with domain= .yourdomain (including preceding dot)

System information (as much as possible)

Setting	Value
PHP Built On	Linux SBS-dev-1 6.5.0-1018-azure #19~22.04.2-Ubuntu SMP Thu Mar 21 16:45:46 UTC 2024 x86_64
Database Type	mysql
Database Version	10.6.16-MariaDB-0ubuntu0.22.04.1
Database Collation	utf8mb4_general_ci
Database Connection Collation	utf8mb4_general_ci
Database Connection Encryption	None
Database Server Supports Connection Encryption	No
PHP Version	8.3.6
Web Server	nginx/1.18.0
WebServer to PHP Interface	fpm-fcgi
Joomla! Version	Joomla! 5.1.0 Stable [ Kudumisha ] 16-April-2024 16:00 GMT
Joomla Backward Compatibility Plugin	Enabled (classes_aliases:"1", es5_assets:"1")
User Agent	Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36

Additional comments

  • testing in both safari and chrome
  • tested with both shared sessions on and off
  • image showing example attached
    Screenshot 2024-04-18 at 12 12 05
@lancedouglas1 lancedouglas1 changed the title cookie domain incorrect for session cookie only [5.1] cookie domain incorrect for session cookie only Apr 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants