Bug #18082 Updated: Session Problems with IE6 after installation of Patch Q321232

ID: 18082 Updated by: lance@metaldog.co.za Reported By: lance@metaldog.co.za -Status: Feedback +Status: Open Bug Type: Session related Operating System: RedHat 7 PHP Version: 4.1.2 New Comment: Derick - Thanks for the response.. I have put together a webpage (or three) which shows all the details, your network capture and what I have been up to. At this moment the issue is so frustrating that I wish that the problem was as simple as configuration issue and that I would have the proverbial "egg in my face" for doing something stupid. In fact, I would gladly accept my fault if the problem would just be resolved. ANY - get that ANY - suggestions would really help resolve this because its driving me mad and a browser patch usually resolves things not causes them. Right now, my conclusion is that there is something between my specific server and the new patched IE security features which is no longer kosher - the problem is that I have no idea what and I am not a hard-core low level developer who can hack and track this any more than I already have. Full details etc available here: http://www.metaldog.co.za/php.net/index.html (some network packet items still uploading at time of this submission - give it 15 minutes to be sure) Thank you Lance Previous Comments: ------------------------------------------------------------------------ [2002-07-01 02:30:34] derick@php.net Hmm... it's easy to say that this is an IE problem (which it is :), but that's not going to help. It would be helpfull if you could make a network trace, to see how IE6 recieves and sends the headers. For instance you could use cold (http://www.ipv4.it/cold/) to do this. With cold --ascii > /tmp/log you start the tool, and when you're done requesting the sessionized pages with both a working and a non-working browser, you can stop it with Ctrl-C. If you then would be able to put the log file somewhere for us to see, we might be able to fix the problem. Derick ------------------------------------------------------------------------ [2002-07-01 02:15:44] lance@metaldog.co.za Hey, Anyone having problems with session variables not being passed or IE resetting session cookies AFTER the installation of the IE6 Q321232 patch? It is the cumulative security patch released May 15 from Microsoft. I am using Virtual Hosts on standalone Apache 1.3.24 (RedHat), Apache/1.3.12 (FreeBSD) and PHP 4.1.2 or PHP 4.2.1. PHP.ini on both systems identical, httpd.conf identical... I am using the example session scripts from the PHP manual - the ones that do a simple page count - before the IE patch, everything works on any system. (track_vars always on, register_globals on or off makes no difference) After the patch IE6 only works on some installations of the exact code and I have not been able to trace the problem. Interestingly, on one server where it does not work - Redhat on a local network, IE now seems to be requesting or auto receiving a new session cookie each time the page loads. The exact same example scripts work from a totally different server to the same IE browsers. All other browsers work fine - even pre patch IE6 and previous versions.. This includes Netscape 4, 6, 6.1, Opera 4,6, IE 4,5, 5.5 and even IE6 before the patch. I have tested this on 3 different installations of IE6 on different systems... The moment the patch is installed it goes belly up... before the patch everything works perfectly... Any ideas? Thanx Lance ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=18082&edit=1