Details
-
Type: Improvement
-
Status: Closed
-
Priority: Blocker
-
Resolution: Fixed
-
Affects Version/s: None
-
Fix Version/s: 5.0.0-b1
-
Component/s: None
-
Labels:None
-
Epic Link:
Description
The session and cookie names stored in the user's browser set by the application are set in the MinphpBridge service provider. Ideally, these should be configurable, so we should add them to the config file similar to the TTLs. We should also rename them to make them more unique to the application, that way they are less likely to conflict with any other applications on the web server that happen to also use the same session/cookie names.
- Create config values in /config/blesta.php for the session name and cookie name
- Update the MinphpBridge service provider to use these config values
- Change the values of the session/cookie names to be more unique to the application
- cookie "csid" should be "blesta_csid"
- session "sid" should be "blesta_sid"
- In order for an admin to upgrade Blesta to this version, they have to be logged-in, but they wouldn't be in any more once they uploaded the new files for the version since the MinphpBridge looks for and uses a session value that has not yet been created (since the upgrade script hasn't updated the config file). Because of this, we will most-likely need to fallback to the original values ("csid" and "sid") if no value is present in the config file.