login.php creates a session even if the user is not logged in

[christoph]

This leads to obsolete and unused sessions.

[christoph]

trunk

changeset:7131

[christoph]

changeset:7134 changeset:7137

What I did was restructure globalSettings.php and system.php a bit. globalSettings starts the session, so when the session is not needed, system.php will suffice (it opens the db connection).

I checked the following scenarios, which are working (= only a single session is created for a user, no more abandoned sessions)

• User A logs in first, then user B in another tab.
• User A logs in first, then user B from another client.

TODO:

• There are still some AJAX calls, where the above with disabled cookies fails. These AJAX calls don't send the session id to the server.
• The logout method should delete all session information and expire the cookie. It seems like the cookie still lives on after logout.

[christoph]

changeset:7138

added optional session name. This is useful if you are using multiple Mapbender installations

[astrid_emde]

• Mapbender 2.7 required cookies