[Tickets #12642] Re: Opening 2 mailboxes inside 1 web navigator (using tabs)

[noreply at bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/12642
------------------------------------------------------------------------------
  Ticket             | 12642
  Updated By         | Michael Slusarz <slusarz at horde.org>
  Summary            | Opening 2 mailboxes inside 1 web navigator (using tabs)
  Queue              | IMP
  Version            | 6.1.4
  Type               | Enhancement
-State              | New
+State              | Rejected
  Priority           | 1. Low
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


Michael Slusarz <slusarz at horde.org> (2013-08-29 15:35) wrote:

> We found a workaround for enabling this feature:
> in php/Horde/Session.php, function clean(), comment the ->setKey()
>
>         $this->_start();
>         // ** $GLOBALS['injector']->getInstance('Horde_Secret')->setKey();
>         $this->_cleansession = true;
> So all the opened mailboxes will share a common secret_key.

Why? You don't need this.  As long as all tabs are using the same  
session, they will have the same key.

And this isn't going to work properly anyway.  To prevent session  
hijacking, we periodically regenerate the session ID.  This will work  
in one tab.  All other tabs will have session failures (since their  
session ID information is now expired).

You need to be using cookies if you want to be using more than one  
window and share a session.