Database-backed session store

[GoogleCodeExporter]

[...] the program would claim that we were logged out ("You must log in to
use this system."), when I was not.  I had to keep sending the request
multiple times until it resolved.

Original issue reported on code.google.com by ajlyon on 19 Nov 2009 at 5:39

[GoogleCodeExporter]

This was reported by Stanford-- not clear what caused them to have to 
frequently log
back in to the system.

Original comment by ajlyon on 19 Nov 2009 at 5:41

• Added labels: Priority-Critical
• Removed labels: Priority-Medium

[GoogleCodeExporter]

This is due to requests from the client being handled by different servers, and 
thus
different instances of Apache and PHP. These instances don't share their PHP 
session
codes, meaning that whenever a user send a new request, there's a risk that the
server won't have their session data. The more robust solution is switching to
MySQL-backed session stores, which PHP handles (via
http://www.php.net/manual/en/function.session-set-save-handler.php)

Original comment by ajlyon on 24 Nov 2009 at 3:35

• Changed title: Database-backed session store
• Changed state: Accepted
• Added labels: Priority-High
• Removed labels: Priority-Critical