Tickets :: Comment on [#9733] Password lost during hordeauth authentication via API

* Your Email Address
* Spam protection	Enter the letters below: . ..__.. .. ..___ \| \|\| \|\| \|\|__\|[__ \|__\|\|__\|\|/\\|\| \|\|
Comment	>> Forget about the above remark, the zero length sessions are created >> regardless of the presence of the above line. So somehow when using >> the Horde_Session_Null handler, the Horde configuring settings for >> the session handler are ignored and the session handler as configured >> in 'php.ini' is used. > > This is a side effect of the Null handler calling session_start(). > Even though we don't store any data in the session, we still must > tell PHP to create one, otherwise certain data that is required to be > available will not be. E.g., session_id() is used by Horde_Secret as > an encryption key. The absence of this value breaks authentication in > certain places.
Attachment
Watch this ticket