Welcome Guest. Please Login or Register  


You are here: Index > Webuzo > Bugs > Topic : [Session Bug] Webuzo can't remember user session



Threaded Mode | Print  

 [Session Bug] Webuzo can't remember user session (6 Replies, Read 3307 times)
easterneas
Group: Member
Post Group: Newbie
Posts: 4
Status:
I hope that I entered the correct forum ;-D 
Hello! I've been using Webuzo since I first rented the VPS somewhere in late 2017. During that time, one thing that always bugged me: Webuzo can't even remember sessions when I just entered my domain/IP with port 2002-2005. It just shows login screen.
What's more, when I just entered my login details, it seems fine. But when I accessed any menus inside the control panel, it just threw me to the login screen again. Heck, even when I tried to logout, it prompts me to login again, and then it can logout (so in practical, I have to login twice to correct this behavior).
In my opinion, the proper session handling should be like this...1. The user logs him/her in2. The control panel shows up, and the session stored somewhere within Webuzo system. This session stores the IP address, the browser agent, the username, and the unique session ID of the logged in user.
3. And when the user closes the CP without logging out, it should remember the login state and logs him/her back in (when the user enters just [e.g.] example.com:2003 to enter end user panel). Otherwise, after 10-15 minutes of inactivity, the user should be thrown to the login screen.

I think the behavior Webuzo stores session should be fixed soon, as I think it's rather annoying. And, no, this isn't about 'remember me' thingy.
Sorry for by bad English, but I hope you understand what I mean.
Thank you :)
IP: --   

[Session Bug] Webuzo can't remember user session
easterneas
Group: Member
Post Group: Newbie
Posts: 4
Status:
Ah, yes, forgot to add one more thing.
This bug is the same across browsers (yes, all browsers), so when you do the same thing with another browser, it behaves the same.
And the bug can be produced easily:1. Access the Webuzo panel (e.g. example.com:2003)2. Login like usual, and you logged in at that point
3. Open new tab, and repeat step 1 and 24. Try access any menus, on both tabs5. It should throw you back to the login screen
IP: --   

[Session Bug] Webuzo can't remember user session
nikhil.m
Group: Webuzo Team
Post Group: Working Member
Posts: 240
Status:
Hi,

If you want to open a new Tab for an existing Webuzo login.

Then right-click on the Webuzo logo in the Top- Left corner and select open in new tab.

This will open a new Webuzo tab with the same session.

As for the log out on every click, I suggest that you clear all the cookies in the browser and try again.
IP: --   

[Session Bug] Webuzo can't remember user session
easterneas
Group: Member
Post Group: Newbie
Posts: 4
Status:
Quote From : nikhil.m May 15, 2018, 12:04 pm
Hi,

If you want to open a new Tab for an existing Webuzo login.

Then right-click on the Webuzo logo in the Top- Left corner and select open in new tab.

This will open a new Webuzo tab with the same session.

As for the log out on every click, I suggest that you clear all the cookies in the browser and try again.


Thanks for the reply.


Well, how about users who closed the tab and then in a few minutes they came back again? That's what I meant on the second post. If you just replied like that, that means 2 things:

1. The users have to scour for their website's recent cp pages in their browser history, *and*

2. The users have to lose their sessions on other websites just only to regain the access to their cp.


But, no, don't get me wrong on this. I just wanna Webuzo getting better and better each time, as I liked to use this over cPanel.
IP: --   

[Session Bug] Webuzo can't remember user session
nikhil.m
Group: Webuzo Team
Post Group: Working Member
Posts: 240
Status:
Hi easterneas,

Thank you for your suggestions I will forward them to the developers.

The reason why if you log in and close the window quickly, tried to access again it shows the login screen is because we use session based login which are cleared from the browser storage once the browser window is closed.

Let me know if you have any further questions.
IP: --   

[Session Bug] Webuzo can't remember user session
easterneas
Group: Member
Post Group: Newbie
Posts: 4
Status:
Quote From : nikhil.m May 16, 2018, 10:40 am
Hi easterneas,

Thank you for your suggestions I will forward them to the developers.

The reason why if you log in and close the window quickly, tried to access again it shows the login screen is because we use session based login which are cleared from the browser storage once the browser window is closed.

Let me know if you have any further questions.


Thanks for replying! :)

Right, I know Webuzo uses session-based login to maintain user login, which is good. But I think the user session data should be stored somewhere within the header (or even better, have the server serves these for users) instead of the URL. With that, users don't have to remember which session the users entered within the URL.

Hope this helps you out :)
IP: --   

[Session Bug] Webuzo can't remember user session
nikhil.m
Group: Webuzo Team
Post Group: Working Member
Posts: 240
Status:
Hi easterneas,

Yes! The team is exploring such options :)

Edited by nikhil.m : May 18, 2018, 11:41 am
IP: --   

« Previous    Next »

Threaded Mode | Print  



Jump To :


Users viewing this topic
1 guests, 0 users.


All times are GMT. The time now is June 23, 2018, 9:24 pm.

  Powered By AEF 1.0.8 © 2007-2008 Electron Inc.Queries: 11  |  Page Created In:0.218