XF 1.2 CometChat & Xenforo w/Memcache (Help Needed)

[Bill.D]

Hey all,

I know that this is not really a Xenforo issue, but I am hoping that someone has had the issue and knows what to do.

I have a Xenforo install with a memcached system to handle sessions. I installed CometChat and it says you need to be logged in even though you are.

Here is what I found. In the Integration.php file in the cometchat directory:

if (!empty($_COOKIE['xf_session'])) {      
        $sql = ("SELECT `session_data` FROM  `".TABLE_PREFIX."session` WHERE `session_id` = '".$_COOKIE['xf_session']."'");
        $query = mysql_query($sql);
        $sess2 = mysql_fetch_array($query);
        $sess3 = unserialize($sess2[0]);
        $userid = $sess3['user_id'];
    }

Note that is is looking in the SQL DB for the Session.. Where as I am using the Memcache system for session.. Does anyone know how to make CometChat look in the Memcached system for session data?

Thanks all,
-Bill

 

[webroxau]

Would that not be a question for cometchat ?

 

[Luke F]

Looks like that snippet is vulnerable to sql injection

 

[Bill.D]

Yah, I asked them but there in a different time zone, and I was hoping someone here already knew the answer.