Skip to content

Session leaking with Symfony #130

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
mathieudz opened this issue Aug 26, 2018 · 2 comments
Closed

Session leaking with Symfony #130

mathieudz opened this issue Aug 26, 2018 · 2 comments

Comments

@mathieudz
Copy link
Contributor

mathieudz commented Aug 26, 2018

Sessions are leaking once in a while in my web application when running with PHP PM. I see that HttpKernel closes the session after a response, but still some users have unwillingly been taking over sessions of other users. I see in my logs that a particular IP suddenly has become another user that was active at that time.

@mathieudz
Copy link
Contributor Author

A better look at the code shows that if the application raises an exception there's no session cleaning in the catch handler of HttpKernel::handle() - only if there's a response without exception.
I guess that is the issue here.

@mathieudz
Copy link
Contributor Author

@andig This one can be closed now

@andig andig closed this as completed Aug 28, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants