No error reporting when session update fails on DBI based modules (probably on others too)
Affected version
Version: 2.17
Summary
- Simulate a SQL error by adding a die() in the update() method of an Apache::Session::Store module
- Try to login
- No error reporting, but a session is created with invalid data (just the session ID)
Possible fixes
Hard to fix because the update method is called in Apache::Session destructor, so we cannot easily catch when the Store module dies because of a SQL error.