3 ms·
Assuming session ID's are tied to individual users and looked up via a "SELECT * from sessions where id='?'" type query, how does this even happen?
by tomc1985 6y ago
Assuming session ID's are tied to individual users and looked up via a "SELECT * from sessions where id='?'" type query, how does this even happen?
- kace91 6y agoBadly designed caches for example. Though I have no idea what happened in this particular case.
- FilterSweep 6y agoThis (bad cache) used to happen with misconfigured shopify sites and had the same impact as described
- duderific 6y agoNot scoping a variable properly (causing a variable to leak out to global scope) could also cause this.
- bawolff 6y agoNot usually in php, where each request has no shared state with any other (outside of apc, memcached)
- TheRealPomax 6y agoRemember https://www.theregister.com/2015/12/30/steam_security_blip_explained/ https://www.theregister.com/2015/12/30/steam_security_blip_e... ?
- trynewideas 6y agoNone acknowledged publicly, but it's an open-source project with pretty open administration, so you can follow along: https://phabricator.wikimedia.org/T264370 https://phabricator.wikimedia.org/T264370