Howdy folks,

I have a solution that works.  FYI, I'm running DNN 4.3.5 under a Win XP virtual directory and using the Emerald Solutions modified store module.  I think the solution should work for the standard store module though I haven't looked at it yet.

To restate the problem, registered users under child portals are forced to reauthenticate after viewing thumbnails in a product listing.  What is actually happening is that the authentication cookie created on login .DOTNETNUKE disappears when thumbnails are viewed.  This happens because the call to thumbnails.aspx does not include the portalID in the querystring.  Although thumbnails.aspx makes no use of the parameter, the string is interpreted by the DNN security framework.  A similar problem was seen in another module previously:

http://www.dotnetnuke.com/Community/ForumsDotNetNuke/tabid/795/forumid/57/threadid/82206/scope/posts/Default.aspx

The solution is to append the portalID parameter to the thumbnails.aspx calls in the productlist and productdetails control code-behind files and rebuild the store module dlls, eg:

        protected string GetImageUrl(string image)
        {
            return parentControl.ModulePath + "Thumbnail.aspx?IP=" + image + "&IW=" + thumbnailWidth + "&portalID=" + PortalId;
        }

Cheers.

Hi,

This bug was not on Gemini, this is why I do not know it. Click on Ploum in the left column, you will find my email. Send me an email with 'WWStore' in the title, I will return to you a modified version with this fix.

Gilles

---

We (team members) are Humans offering their knowledge, their work and their spare time FOR FREE to benefit the community. It would be so particularly appreciated that your messages begin with "Hello" and end with "Thank you" or any other form of politeness. Ask yourself what your reaction would be, if you were approached by me (a total stranger) on the street to ask you something without saying "Hello" nor "Thank you"? After several years of services dedicated to the community, I begin to be tired to read requests without any form of politeness.