PW 3.0.103 – Core updates

[ryan]

This week we've got some really nice upgrades to three core modules: SessionHandlerDB, ProcessForgotPassword and FieldtypeComments. This post covers all the details:

https://processwire.com/blog/posts/pw-3.0.103/

[Robin S]

Quote

This particular feature enables an option to prevent parallel sessions. That means preventing the same user from having more than one login at a time.

Great, that will be really useful on sites with premium (paid) memberships where you want to prevent multiple users being sneaky and sharing a single account. Thanks  @kixe and Ryan.

I've avoided SessionHandlerDB apart from when I really need it because I've heard of strange issues that have eventually been traced back to this module. Unfortunately I can't remember what those issues were. For regular users of SessionHandlerDB: are there any issues or incompatibilities with other modules to be aware of?

 

Quote

Ability to use email address rather than username, to initiate a password reset request.

Nice! I only wish the announcement had come a couple of weeks earlier. ?
I spent some time recently modifying ProcessForgotPassword for just this purpose.

 

Quote

Upgrades to comments search engine

Excellent, I have closed an old request relating to this.

[horst]

12 hours ago, Robin S said:

I've avoided SessionHandlerDB apart from when I really need it because I've heard of strange issues that have eventually been traced back to this module. Unfortunately I can't remember what those issues were. For regular users of SessionHandlerDB: are there any issues or incompatibilities with other modules to be aware of?

Hi Robin,

the only thing I remember was this:

But this was fixed sometime after that thread. Today using the SessionHandlerDB is without this issues.

[Robin S]

Thanks horst.

I did some searching and thought it might be useful to compile a list of the issues, which are mostly (or perhaps all) resolved now.

Solved: The issue mentioned above where some images were lost when multiple large images were uploaded simultaneously.
https://github.com/ryancramerdesign/ProcessWire/issues/1871
https://processwire.com/talk/topic/13522-problem-with-ajax-images-upload-and-sessionhandlerdb/

Solved: Session times recorded incorrectly when MySQL timezone does not match local time.
https://github.com/ryancramerdesign/ProcessWire/issues/1838
https://processwire.com/talk/topic/13307-session-handler-database-times-out-by-two-hours/

Solved: Truncated session data when Tracy Debugger installed.
https://processwire.com/talk/topic/15784-what-will-trigger-a-csrf-error/

Solvable: Old sessions not deleted on some Ubuntu servers.
I have struck this one myself and @horst's suggestion in the post below solved it.
https://processwire.com/talk/topic/5796-session-handler-database-do-not-delete-old-sessions/?do=findComment&comment=56596

Fatal error thrown on Windows server using IPv6.
https://github.com/ryancramerdesign/ProcessWire/issues/1596
https://processwire.com/talk/topic/12935-issues-moving-from-iis-localhost-machine-into-windows-server-production/

Slow performance with large number of sessions.
https://processwire.com/talk/topic/18718-session-handler-db-issue/
But with huge amounts of traffic performance may be affected without SessionHandlerDB installed too.

Login problems after website migration.
Might be solvable by clearing caches.
https://processwire.com/talk/topic/5317-cant-log-in-this-request-was-aborted-because-it-appears-to-be-forged/?do=findComment&comment=142160
https://processwire.com/talk/topic/13781-problems-after-installing-remote-copy-to-local/