为什么CakePHP授权组件在并行打开两个站点时会自动注销？

Question

I have a problem within my CakePHP application: I use the Authorization Component for the login/logout mechanisms. Unfortunately users are logged out automatically when they try to open two or more php pages at the same moment. Thats happening very often because we tend to use the middle mouse button to open many tabs in short intervals.

Has anybody an idea? Could it be CakePHP or is there a php setting for allowing useres to make multiple requests at the same time?

georg

Answer 1

Because of session_regenerate_id(). For every page you open, you get a new session_id. This prevent session hijacking (which is uncommon but possible). Turn your security level in config.php down to medium to prevent this.