Bug 26002

Summary: mod_usertrack prohibits other modules from setting cookies
Product: Apache httpd-2 Reporter: Scott Moore <apache>
Component: mod_usertrackAssignee: Apache HTTPD Bugs Mailing List <bugs>
Status: CLOSED FIXED    
Severity: major CC: hm
Priority: P3    
Version: 2.0-HEAD   
Target Milestone: ---   
Hardware: All   
OS: other   

Description Scott Moore 2004-01-08 22:47:21 UTC 
mod_usertrack improperly makes a call to apr_table_setn to create the 
"Set-Cookie" header.  If another module has run before mod_usertrack and added 
it's own "Set-Cookie" or "Set-Cookie2" header, the data is lost.  This affects 
both Apache 2.0 and Apache 1.3. 

A call to apr_table_addn instead may be more appropriate (mod_usertrack.c, line 
191).
Comment 1 André Malo 2004-01-13 00:17:44 UTC 
Fixed in 2.1 and proposed for backport into 2.0 and 1.3 branches.

Thanks for the report and thanks for using Apache.
Comment 2 André Malo 2004-02-05 23:22:15 UTC 
*** Bug 26693 has been marked as a duplicate of this bug. ***