Ampache

First off, this bug only manifests itself when require_session = true.

The problem is that all other forms of streaming pass in the variable SSID in the URL. For whatever reason, a remote stream through RPC tries to send the variable as SID. This spelling differences causes index.php to not properly get the session, causing the "session timed out" error.

We hacked a fix into index.php:

//$sid = scrub_in($_REQUEST['ssid']); // this is the original line

/*Below is a hack to make XML-RPC streaming work with require_session = true on in ampache cfg.
this is in the URL for local request  */
$sid = scrub_in($_REQUEST['ssid']);

if (empty($sid)) {
//this is used in remote request
$sid = scrub_in($_REQUEST['sid']);
}