Secret URL switches to login screen

[Kristina Hoeppner]

I've experienced this phenomenon a few times now that when I add a secret URL to a view and check that in another browser where I am not logged in that it adds an "&login" to the secret URL to pop up the login screen. When I delete that last part to get back to my original secret URL and hit Enter, I can view the view without any problems or being asked to log in.

Mahara 1.3; created the view in Firefox, "&login" is added in both Chrome and Safari where I am not logged in.

view where it happens: http://demo.mahara.org/view/view.php?t=7u3FsAyzrfIlNohJWwVa

[Richard Hand (richard-tdm)]

I'm finding the same behaviour for Mahara 1.3.3 - even post fix.

i.e. when you open a secret URL in a new browser then the &login is added to the end of the URL. This occurs in all browsers I have tested (firefox/chrome/opera/ie7).

[Kristina Hoeppner (kris-hoeppner)]

Does it occur every time? I don't have a Mahara 1.3.3 post fix and thus tried master.dev (1.4 unstable) and don't have that problem (chrome, safari on mac).

[Kristina Hoeppner (kris-hoeppner)]

Several people confirmed that the problem still occurs (so far careerportfolio.mb.ca was tested). Please see http://mahara.org/interaction/forum/topic.php?id=1055 for more information.

The URL that was tested: http://careerportfolio.mb.ca/view/view.php?t=nUKrCzt2sNkJBT5EbmRV

[Dominique-Alain JAN (dajan)]

Effectively we tried yesterday after Don Presant requested to test this with his servers.

Nota: if you copy/paste the link in the browser it works fine. If you click on the link the problem occurs. Then if you close the window and open the link again, it works fine, even if you clear the cache on the browser's side (maybe a question of cache on the server's side).