diff --git a/ChangeLog b/ChangeLog index bf1273cd9..bd73777a8 100644 --- a/ChangeLog +++ b/ChangeLog @@ -28,6 +28,7 @@ $HeadURL: https://phpmyadmin.svn.sourceforge.net/svnroot/phpmyadmin/trunk/phpMyA - bug #1759194 [import] open_basedir warning - bug #1793948 [parser] ROW_FORMAT incorrectly parsed - undefined PMA_MYSQL_INT_VERSION when no default server is set +- bug #1763343 [session] Behavior with session.auto_start enabled 2.11.2.2 (2007-11-20) - bug #1835123 [security] fixed XSS vulnerability on login page, diff --git a/libraries/session.inc.php b/libraries/session.inc.php index 382b60ba3..e6b2d1073 100644 --- a/libraries/session.inc.php +++ b/libraries/session.inc.php @@ -19,12 +19,9 @@ if (!@function_exists('session_name')) { PMA_fatalError('strCantLoad', 'session'); } elseif (ini_get('session.auto_start') == true && session_name() != 'phpMyAdmin') { - $_SESSION = array(); - if (isset($_COOKIE[session_name()])) { - PMA_removeCookie(session_name()); - } - session_unset(); - @session_destroy(); + // Do not delete the existing session, it might be used by other + // applications; instead just close it. + session_write_close(); } // disable starting of sessions before all settings are done