Laravel losing session when file extension in URL

Question

I have a weird bug in my Laravel application where, when I use a file extension in the URL, the application is logging out automatically.

After investigating I noticed it only happens when using valid file extensions on existing routes (except for /login). It does not even reach the controller.

Does not work: /home?file=test.png (logs out and redirects to login page)
Works: /home?file=test.abc (noenter code heren-existing file extension, works fine)
Works: /login?file=test.png (shows login page, but session is not lost)
Works: /non-existing-route?file=test.png (shows 404 but session is not lost)

In my development environment (XAMPP) I'm having no issues at all, only in production. I also checked .htaccess but there is nothing going on there either.

I'm using Laravel 9 in combination with the Tenancy for Laravel package.

Suggestions would be appreciated!

Aakash Desai · Accepted Answer · 2024-10-30 06:36:41Z

0

Ensure that PHP is not using URL-based session IDs by setting session.use_trans_sid to false. You can do this in your php.ini file or directly in your Laravel application. In your php.ini file:

session.use_trans_sid = 0

Or in your Laravel application, you can add this line to your public/index.php file:

ini_set('session.use_trans_sid', false);

Also run this php artisan session:clear

edited Oct 30, 2024 at 6:36

answered Oct 30, 2024 at 6:35

Aakash Desai

113 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Roel Jansen Over a year ago

session.use_trans_sid is already set to 0.

Collectives™ on Stack Overflow

Laravel losing session when file extension in URL

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related