[Bug 6360] New: Site visitors have their session UID changed at random points during heavy site traffic

[email protected]
Newsgroups gmane.comp.cms.xaraya.bugs
Message-ID <[email protected]>
http://bugs.xaraya.com/show_bug.cgi?id=6360

           Summary: Site visitors have their session UID changed at random
                    points during heavy site traffic
           Product: App - Core
           Version: Weekly Tarball
          Platform: PC
               URL: http://www.ruminations.com
        OS/Version: Windows XP
            Status: NEW
          Severity: major
          Priority: P3 - Standard
         Component: API
        AssignedTo: [email protected]
        ReportedBy: [email protected]
         QAContact: [email protected]


User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.7)
Gecko/2009021910 Firefox/3.0.7
Build Identifier: 

Visitors to the site Ruminations.com occasionally have the UID stored for their
session changed to that of a different user. The XARAYASID stored in the
visitors cookie (when issue occurs) corresponds to a different xar_uid in the
sessions table in the site database. Visitors experiencing the issue that log
out and then log back in have the xar_uid value corrected. When issue occurs,
it affects the displayed user name in the theme, articles that are submitted,
comments that are submitted, and other modules item submissions.

Issue began after host updates to address traffic congestion on the server, but
review of server settings etc does not reveal any potential causes of the
issue. Research turned up the following URL as a potential explanation of the
issue, but the fix described in it (based on "race condition") did not correct
the problem.

Reproducible: Sometimes

Steps to Reproduce:
1. Log in to http://www.ruminations.com
2. Submit a "Rumination" article
3. Submit a comment to a "Rumination" article

Steps do not reliable reproduce issue; is very sporadic, but happens often
enough on a site with 10k+ visitors daily.

Actual Results:  
Displayed username and all content submitted are done so under a different
visitor's UID.

Expected Results:  
Should remain the current visitor throughout any/all site actions.


-- 
Configure bugmail: http://bugs.xaraya.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

---- ** IMPORTANT ** READ BELOW ** ----
[Clip Me Start]
--------------------------------------------------------------------------
If you wish, you can reply to this message directly **however**, make sure
to use the "Reply To All" feature of your client **and** ensure that the 
bug specifier is in the subject (ie: [Bug ####]). Also, you _MUST_ have 
you're From or Reply-To address set to the same address you use to log
into your bugzilla account or your reply will not be attached to the bug.
--------------------------------------------------------------------------
[Clip Me End]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.