Bug #18559 Updated: Session variables not stored when register_globals is off

ID: 18559 Updated by: rverlander@php.net Reported By: jensen@byu.edu -Status: Open +Status: Bogus Bug Type: Session related Operating System: Windows 2000 PHP Version: 4.2.2 New Comment: In PHP 4.2.0, the 'register_globals' setting default changed to be off. See http://www.php.net/release_4_2_0.php for more info. We are sorry about the inconvenience, but this change was a necessary part of our efforts to make PHP scripting more secure and portable. Previous Comments: ------------------------------------------------------------------------ [2002-07-25 14:39:25] max@ahston.se Strange. I added "php_flag register_globals on" in the .htaccess file for the programs that had the problems in 4.2.2 and squrrielmail worked again. Squrrielmail depends on this to be "on", and a major change in 4.2.0 was that this was turned off. Eventough it doesn't seem to have come to an effect before 4.2.2 now was released. ------------------------------------------------------------------------ [2002-07-25 11:59:02] max@ahston.se I have also noticed several webapplications based on PHP to stop working. For example does SquirrelMail not work after changing to Apache 1.3.26+php4.2.2.. But going back to Apache 1.3.26+php4.2.1 there is no problem. I haven't looked deep into the problem, but as the first user reported it seems to be session based. For example there is calender application where you jump back and forth between different months. When running 4.2.2 it doesn't change month but show the same whatever you do.. Running Redhat with Linux 2.4.18-5smp ------------------------------------------------------------------------ [2002-07-25 11:58:32] max@ahston.se I have also noticed several webapplications based on PHP to stop working. For example does SquirrelMail not work after changing to Apache 1.3.26+php4.2.2.. But going back to Apache 1.3.26+php4.2.1 there is no problem. I haven't looked deep into the problem, but as the first user reported it seems to be session based. For example there is calender application where you jump back and forth between different months. When running 4.2.2 it doesn't change month but show the same whatever you do.. Running Redhat with Linux 2.4.18-5smp ------------------------------------------------------------------------ [2002-07-25 03:59:17] jensen@byu.edu I discovered this earlier today, and then while reading through the user comments under "Session handling functions" looking for a solution, I discovered I wasn't the only one with the same problem. Here it is: When register_globals is off (as it should be), under Win2K, Apache 1.3.26, PHP 4.2.2, I cannot for the life of me get session variables to work as they should. I've read the documentation thoroughly, and can't find a solution. Here's some sample code (which incidentally runs perfectly fine on my other web server - Linux, Apache 1.3.26, PHP 4.2.1) --- page1.php ----------------------- <? session_start(); $_SESSION['sess_var'] = "Hello World!"; echo "The content of session variable is "; echo $_SESSION['sess_var']; ?> <a href = "page2.php">Next page</a> ------------------------------------- This file outputs correctly what is expected. But next file does not... --- page2.php ----------------------- <? session_start(); if (isset($_SESSION['sess_var'])) { $sess_var = $_SESSION['sess_var']; echo "The content of \$sess_var is $sess_var"; } else echo "The session variable does not exist! "; ?> So is this a bug specific to PHP 4.2.2? Or only Win 2K? Any help would be greatly appreciated. Incidentally, ever since I upgraded from 4.2.0, IE won't display several of my PHP scripts, while Netscape and Opera will... Hmmm. All I get is an "Internal Server Error" message... Any suggestions would be great. -Jon ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=18559&edit=1