Page 1 of 1

session key in url on admin login

Posted: Wed May 27, 2009 3:40 pm
by turniphead
I have a new install that puts a session key in the url when the admin logs in like :
http://mysite.com/admin/index.php?_s_=c3bc3d6f

This didn't happen on a previous install and I am wondering what causes the session key to display on one site and not another. I don't see anything obvious in the config.php or settings.

I'm using 1.5.4 on a LAMP environment.

I am only concerned because I have other problems in the admin area and I am wondering is this is the cause. For example, in content->pages the move up/down and collapse/expand buttons return a javascrip alert:
"Error: The XML response that was returned from the server is invalid"
I am wondering if the session thing is causing it.

Thanks for looking.

Re: session key in url on admin login

Posted: Wed May 27, 2009 6:15 pm
by viebig
Hello, session key is an additional security implementation on 1.5.4+. Nothing to do with your XML as far as I know.

I never experienced this error, maybe mark can help you with that. Did you run site verification?

Regards

G

Re: session key in url on admin login

Posted: Wed May 27, 2009 6:51 pm
by RonnyK
As Viebig mentioned.... The session key is a security-check to prevent CrossSideScripting.

The XML error in listcontent is often caused by some error in a lang-file, the second line often tells you which file is causing it.....

Ronny