We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Шукати в статтях підтримки

Остерігайтеся нападів зловмисників. Mozilla ніколи не просить вас зателефонувати, надіслати номер телефону у повідомленні або поділитися з кимось особистими даними. Будь ласка, повідомте про підозрілі дії за допомогою меню “Повідомити про зловживання”

Докладніше

Ця тема перенесена в архів. Якщо вам потрібна допомога, запитайте.

FireFox failing to destroy PHP SESSION on browser close.

  • 5 відповідей
  • 72 мають цю проблему
  • 4 перегляди
  • Остання відповідь від Hasan

more options

Sessions are supposed to be destroyed when the browser application is closed. Users assume that if they close the browser, the next person to open it will not be able to view web applications they may have authenticated to. A sample php web page is included in 'Troubleshooting' section. To duplicate the problem publish the example code, load the page in FireFox. On first load, session is reported as not there. On reload, it's reported as intact. Then close the browser (choose 'Save & Close'). Open FireFox again. You will see the session has been maintained through a browser restart. This may be handy, but is rather dangerous, as many web applications assume that after the browser is closed, sessionID's are destroyed.

This happened

Every time Firefox opened

Sessions are supposed to be destroyed when the browser application is closed. Users assume that if they close the browser, the next person to open it will not be able to view web applications they may have authenticated to. A sample php web page is included in 'Troubleshooting' section. To duplicate the problem publish the example code, load the page in FireFox. On first load, session is reported as not there. On reload, it's reported as intact. Then close the browser (choose 'Save & Close'). Open FireFox again. You will see the session has been maintained through a browser restart. This may be handy, but is rather dangerous, as many web applications assume that after the browser is closed, sessionID's are destroyed. == This happened == Every time Firefox opened

Усі відповіді (5)

more options

seems my sample code didn't make it into the post. I'll try to add as an image.

more options

hi,we have the same problem,pls tell us how to figure it out,thank you.

more options

Hi,

i discovered if you enable Firefox to remember tabs from last time so the session cookie won't be deleted on closing Firefox.

Configure Firefox to don't remember tabs from last time. Firefox will delete your session cookie and starts up with no opened tabs.

Hope it helps.

more options

But the problem is that you don't want to mess the default configuration of Firefox by notifying your user to configure some part of the browser just to make things smooth. Extra configuration sometimes intimidates/dampens a not-so-tetchy individual. We want a solution that is less hassle and automatic :D

more options

@ jc_coki Post your question in a new thread. this thread is a Year old so there are high chances that your question might not be attended