How can you solve this mixture of admin and user sessions?

Always launch with newtest=Y or Private browser.

It's a question : not an issue here …

The surveys are startet with newTest=Y, private browsing is unfortunately not possible.

The problem is with the session handling, example:

1. Call the general settings, Format = G there.
2. Call public survey with format switch at URL: .../index.php/999901?newtest=Y&lang=en&format=A&template=etc_dataentry
3. Then call the general settings again, Format = A is shown (which is wrong), though at the DB it is still G

If you log out and log in to the admin interface again, the format is shown as G again because of the new session.

So the problem - to me - seems to be the mix of admin and public survey session.

Any idea how to differentiate these settings???

Using different browsers or private tabs is no possible solution.

Why?

RE "Why?" -> The customer's answer: "Because people at the company are stupid. We just need a working solution for which we do not have to train every new employee."

OK, to repeat what I wrote in the chat, what you need is probably a patch that overrides the PHP session if a certain URL parameter is set.

Well, I think a better session handling at Limesurvey would be the core thing. Why can public survey sessions and admin sessions get messed up at all? Can we somehow differentiate between a survey taking session and the admin session?

We are already adjusting the session if the URL parameter is set, see code snippet above:
$sessionKey = 'template_' . $surveyId;
Yii::app()->user->setState($sessionKey, $this->templateName);
$this->event->set('template', $this->templateName);

Thing is that this adjustment also affects the admin session, see step 3 above.

https://gitlab.com/SondagesPro/coreAndTools/sessionNameBySurvey

This must be tested more and more.

Else : i really think we muts have different session name too. For each survey and for admin.

Something you can try :

1. 2 tabs
2. Preview group
3. At same time reload other admin page
4. You are loggued out …

I agree with DenisChenu.
The sessionNameBySurvey plugin looks very good to me. It will unfortunately not fix our problem because the survey developers works in the same survey.
But regardless of this topic it of course would fix problems if somebody works in multiple tabs with different surveys which should be a problem at the moment too.

The sessionNameBySurvey plugin looks very good to me. It will unfortunately not fix our problem because the survey developers works in the same survey.

the plugin use own session name only for survey controller, never for admin controller : https://gitlab.com/SondagesPro/coreAndTools/sessionNameBySurvey/-/blob/master/sessionNameBySurvey.php#L33

But : to be incuded in LS core : best option seems to extend https://github.com/LimeSurvey/LimeSurvey/blob/master/framework/web/CHttpSession.php

@DenisChenu, for which use case did you actually develop this plugin for? Did you test it with a new 3.27 version?

RE " i really think we muts have different session name too. For each survey and for admin." -> I totally agree!

for which use case did you actually develop this plugin for? Did you test it with a new 3.27 version?

https://bugs.limesurvey.org/view.php?id=13761
and only quickly tested on 3.10

Another more easy solution : 2 different link (alias)
Use publicurl to set the public link.

Different website => 2 different session.

@DenisChenu, does that work with a load balanced system with db based sessions?

Can we have the same Limesurvey system to use e.g.
mydomin.com as publicurl
admin.mydomain.com as homeurl

And plugin solution :

See : https://gitlab.com/SondagesPro/mailing/adminNotificationHtmlAnswerTable/-/blob/master/adminNotificationHtmlAnswerTable.php#L42

Must be adapted to the situation,

Finally beforeControllerAction must check if you are in admin or public and register the good afterFindSurvey according to this.
You can even use private variable to check if need to update Survey or not.

maybe best

1. private $ispublic to false
2. beforeControllerAction : check ispublic : false or true
3. afterFindSurvey : if ispublic : update Survey accrding to param or SESSION. If not : didn't update.

@DenisChenu, does that work with a load balanced system with db based sessions?

Session cookies are not the same , then i think yes.

Do the trick

    /**
     * Register to afterFindSurvey only if needed
     */
    public function beforeControllerAction()
    {
        $controller = $this->getEvent()->get('controller');
        $neededControllers = array('survey');
        if (!in_array($controller, $neededControllers) ) {
            return;
        }
        $this->subscribe('afterFindSurvey');
    }