View Issue Details

Related ChangesetsJump to NotesJump to History
This issue affects 1 person(s).
 6
IDProjectCategoryView StatusDate SubmittedLast Update
18975Bug reportsSurvey editingpublic2023-07-21 04:082026-10-20 17:06
Reporteradamzammit Assigned Toc_schmitz  
PrioritynoneSeverityminor 
Status closedResolutionfixed 
Product Version6.1.x 
Summary18975: Administrative user logout when rapidly refreshing question or group preview
Description

When previewing in a question / question group / survey as a survey administrator and you rapidly refresh the preview window, eventually you will receive a 401 permission denied due to being logged out.

On further inspection, it appears for each refresh of the preview page, the session id is regenerated, see: https://github.com/LimeSurvey/LimeSurvey/blob/5a08c33c58b0e7477f840e062219c9b102b82c82/application/helpers/frontend_helper.php#L789 and https://github.com/LimeSurvey/LimeSurvey/blob/5a08c33c58b0e7477f840e062219c9b102b82c82/application/helpers/frontend_helper.php#L1381

eventually the session id becomes out of sync with the current page load in the browser, so it appears the user has been logged out (although the last session remains sitting on the server)

Steps To Reproduce

Steps to reproduce

preview a question as an administrator
refresh the page preview page rapidly

Expected result

preview just refreshes indefinitely

Actual result

preview eventually displays a 401 and the admin user becomes logged out / disconnected from session

TagsNo tags attached.
Attached Files
limesurvey-logout-on-preview-refresh-2023-07-21_12.07.13.webm (758,213 bytes)   
limesurvey-logout-on-preview-refresh-2023-07-21_12.07.13.webm (758,213 bytes)   
Bug heat6
Complete LimeSurvey version number (& build)6.1.8
I will donate to the project if issue is resolvedNo
Browser
Database type & versionMariadb 10.5
Server OS (if known)
Webserver software & version (if known)
PHP Version8.1
Git branch / Pull Request URLN/A

Relationships

Relationship GraphDependency Graph
related to 17778 closedc_schmitz Possible log out when preview survey 

Users monitoring this issue

There are no users monitoring this issue.

Activities

DenisChenu

DenisChenu

2023-07-21 08:05

developer   ~76207

Already reported … exist in 3X too : https://github.com/LimeSurvey/LimeSurvey/pull/2590
c_schmitz

c_schmitz

2026-10-15 21:08

administrator   ~86479

Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=40873
LimeBot

LimeBot

2026-10-20 17:06

administrator   ~86591

Fixed in Release 7.7.0+261020

Related Changesets

LimeSurvey: master c9160a58

2026-10-15 21:07

c_schmitz


Details Diff		 Fixed issue 18975: Administrators were logged out when rapidly reloading a survey, group or question preview
Dev The session ID is no longer regenerated on survey start for logged-in users (already done on login), only for guests		 Affected Issues
18975
mod - application/helpers/frontend_helper.php Diff File

Issue History

Date Modified Username Field Change
2023-07-21 04:08 adamzammit New Issue
2023-07-21 04:08 adamzammit File Added: limesurvey-logout-on-preview-refresh-2023-07-21_12.07.13.webm
2023-07-21 08:05 DenisChenu Note Added: 76207
2023-07-21 08:05 DenisChenu Bug heat 0 => 2
2023-07-21 08:05 DenisChenu Relationship added related to 17778
2023-08-23 15:13 gabrieljenik Status new => acknowledged
2026-10-15 21:08 c_schmitz Changeset attached => LimeSurvey master c9160a58
2026-10-15 21:08 c_schmitz Note Added: 86479
2026-10-15 21:08 c_schmitz Assigned To => c_schmitz
2026-10-15 21:08 c_schmitz Status acknowledged => resolved
2026-10-15 21:08 c_schmitz Resolution open => fixed
2026-10-15 21:08 c_schmitz Bug heat 2 => 4
2026-10-20 17:06 LimeBot Note Added: 86591
2026-10-20 17:06 LimeBot Status resolved => closed
2026-10-20 17:06 LimeBot Bug heat 4 => 6