Skip to content
This repository has been archived by the owner on May 16, 2018. It is now read-only.

Uncaught exception Zend_Session_Exception if invalid session id was received #668

Open
Stafox opened this issue Feb 2, 2016 · 0 comments

Comments

@Stafox
Copy link

Stafox commented Feb 2, 2016

Uncaught exception 'Zend_Session_Exception' with message 'The session has already been started. The session id must be set first.' in library/Zend/Session.php:667

This happens if invalid session id was received, for example: Cookie: PHPSESSID=(null) and session has already been started in bootstrap.

Because if self::_checkId(self::getId()) returns false, it tried to generate a valid, temporary replacement for session id using
self::setId(md5(self::getId()));
this caught the exception.

It can be reproduced using curl:
curl -X POST -H "Cookie: PHPSESSID=(null)" http://zf1project.local/

Be sure that session has been started in bootstrap.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants