0002762: cookie-path of auto-logon should be set to actual sub-folder

ID	Project	Category	View Status	Date Submitted	Last Update
0002762	mantisbt	security	public	2002-12-04 10:30	2014-11-07 15:00

Reporter	~~reporter~~	Assigned To
Priority	normal	Severity	feature	Reproducibility	always
Status	new	Resolution	open
Platform	x86	OS	Windows 2000
Product Version	0.17.5

Summary	0002762: cookie-path of auto-logon should be set to actual sub-folder
Description	running multiple copies of mantis on the same host - in different subdirs - causes the auto-logon to not function anymore, since the user has different logon-information or DB id in the different instances running
Tags	No tags attached.

jfitzell 2002-12-09 01:46 reporter ~0003542	I agree this could be desireable alright... note that you can fix this now by setting $g_cookie_path in your config file. You can also have a per-virtual-host (or whatever) config file loaded by using an environment variable if you're using the CVS code. See comments in core.php if you're interested. I guess I'll accept this and we can try to make it set the path to the base path of the installation

grangeway 2007-07-21 17:11 reporter ~0015136	install.php should do this.

grangeway 2014-09-22 15:48 reporter ~0041279	I wonder if cookie_path should default to mantis install path instead of /