20598: Token overwrite when opening multiple survey tokens in different tabs of the same browser

This issue affects 1 person(s).

ID	Project	Category	View Status	Date Submitted	Last Update
20598	Bug reports	Survey participants (Tokens)	public	2026-07-07 10:10	2026-07-09 12:35

Reporter	alainl88	Assigned To	c_schmitz
Priority	none	Severity	minor
Status	assigned	Resolution	open

Summary	20598: Token overwrite when opening multiple survey tokens in different tabs of the same browser
Description	When a user opens two distinct token links for the same survey in two different tabs of the same browser session, LimeSurvey overwrites the active token session data with the most recently loaded one. If the user goes back to the first tab and tries to save or proceed, the response data gets cross-contaminated or associated with the second token.
Steps To Reproduce	Steps to reproduce: Generate two distinct participant tokens for the same survey (e.g., Token_AAA and Token_BBB). Open the survey link for https://surveyXXX.it/index.php/758982?token=Token_AAA. Fill in some answers on Page 1 but do not submit (leave it in draft/session). Open the survey link for https://surveyXXX.it/index.php/758982?token=Token_BBB in the same browser. You find all the data belonging to Token_AAA associated to Token_BBB (this will be associated in DB as well). Expected result: The system should preserve the individual token context or warn the user without mixing data. Actual result: The data is overwritten by the token loaded as last (Token_BBB). The answers typed first are either lost or get erroneously assigned to the participant of Token_BBB.
Tags	No tags attached.

Bug heat	6
Complete LimeSurvey version number (& build)	6.15.23
I will donate to the project if issue is resolved	No
Browser
Database type & version	00
Server OS (if known)
Webserver software & version (if known)
PHP Version	8.2.32

User List	alainl88

c_schmitz 2026-07-07 17:52 administrator ~85169 Last edited: 2026-07-07 18:30	I cannot reproduce this. As a logged in administrator this is expected not to work properly unless you attach the newtest=Y parameter, which always enforces a new session.l You need to make sure that you are not logged into the administration at the same time. Use a separate browser to properly test this. When I open the second link I get the proper message "Access code mismatch The access code you provided doesn't match the one in your session." However in this case the first session gets wiped, but that is a different problem. Please re-test and let us know.

alainl88 2026-07-09 12:35 reporter ~85188	I tested without being logged in. I opened the first link and fill in some data. I left the tab opened and did not send the survey. I check the responses and the draft is related to token test_CODICESEDE On the same browser, i open the second link. I find the data filled in from test_CODICESEDE. I check the responses and the above draft is now related to token test_CODICESEDE01 You can partially test yourself: https://rilevazioni.usr.sicilia.it/index.php/758982?token=test_CODICESEDE https://rilevazioni.usr.sicilia.it/index.php/758982?token=test_CODICESEDE01

Date Modified	Username	Field	Change
2026-07-07 10:10	alainl88	New Issue
2026-07-07 10:11	alainl88	Issue Monitored: alainl88
2026-07-07 10:11	alainl88	Bug heat	0 => 2
2026-07-07 17:52	c_schmitz	Note Added: 85169
2026-07-07 17:52	c_schmitz	Bug heat	2 => 4
2026-07-07 17:52	c_schmitz	Assigned To	=> c_schmitz
2026-07-07 17:52	c_schmitz	Status	new => feedback
2026-07-07 17:53	c_schmitz	Note Edited: 85169
2026-07-07 18:30	c_schmitz	Note Edited: 85169
2026-07-09 12:35	alainl88	Note Added: 85188
2026-07-09 12:35	alainl88	Bug heat	4 => 6
2026-07-09 12:35	alainl88	Status	feedback => assigned

View Issue Details

Users monitoring this issue

Activities

Issue History