Bug #18855 [Com]: PHPSESSID, The Session Key is chagned in same page
| From: | otr214430 at gmail dot com | Date: | Fri, 01 Aug 2014 11:46:13 +0000 |
| Subject: | Bug #18855 [Com]: PHPSESSID, The Session Key is chagned in same page | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-186924@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=18855&edit=1
ID: 18855
Comment by: otr214430 at gmail dot com
Reported by: number3 at windogs dot com
Summary: PHPSESSID, The Session Key is chagned in same page
Status: No Feedback
Type: Bug
Package: Session related
Operating System: Linux 2.4.18
PHP Version: 4.2.2
Block user comment: N
Private report: N
New Comment:
Problem: HP Printer not connecting to my laptop.
I had an issue while connecting my 2 year old HP printer to my brother's laptop that I had
borrowed for starting my own business. I used a quick google search to fix the problem but that did
not help me.
I then decided to get professional help to solve my problem. After having received many quotations
from various companies, i decided to go ahead with Online Tech Repair (www.onlinetechrepairs.com).
Reasons I chose them over the others:
1) They were extremely friendly and patient with me during my initial discussions and responded
promptly to my request.
2) Their prices were extremely reasonable.
3) They were ready and willing to walk me through the entire process step by step and were on call
with me till i got it fixed.
My Experience
I loved the entire friendly conversation that took place with them. They understood my needs clearly
and acted upon the solution immediately. Being a technical noob, i sometimes find it difficult to
communicate with tech support teams. It was a very different experience with the guys at Online Tech
Repairs. You can check out their website www.onlinetechrepairs.com or call them on 1-914-613-3786.
Would definitely recommend this service to anyone who needs help fixing their computers.
Thanks a ton guys. Great Job....!!
Previous Comments:
------------------------------------------------------------------------
[2002-09-19 13:24:44] kalowsky@php.net
No feedback was provided. The bug is being suspended because
we assume that you are no longer experiencing the problem.
If this is not the case and you are able to provide the
information that was requested earlier, please do so and
change the status of the bug back to "Open". Thank you.
------------------------------------------------------------------------
[2002-08-13 21:50:24] kalowsky@php.net
I'm not sure I understand this bug completely, so bare with me. From what I gather, your code
writes a new userid based upon the userinfo->id, where the PHPSESSID is. From your example
though I don't see how this could be possible as the $PHPSESSID won't change during the
execution of the page.
But in any case, can you please provide a short sample script to reproduce this? It would help.
------------------------------------------------------------------------
[2002-08-11 08:30:54] number3 at windogs dot com
Hi,
i have used the php session with pgsql handler, for user authencation.
but I find that the php session key, PHPSESSID is changed same page. that sistuation is not always,
but a few time.
my debug code below.
--------------------------------------------
session_register("userinfo");
$q_update = "UPDATE session SET userid = '".$userinfo->id."' WHERE
sesskey = '".$PHPSESSID."'";
pg_exec($conn, $q_update);
--------------------------------------------
the register value "userinfo" is class var.
in debug result, the empty PHPSESSID value, not null value value is recorded.
and Session key is threr changed.
1. orginal sesskey
2. empty sesskey
3. new sesskey
That result in no login because sesskey is changed.
why that cause ?
addition, why be The PHPSESSID empty value ?
that is not normal. that situtaion result in session share.
1. user A -> login with sesskey1(sucess)
2. user B -> login with sesskey2(sucess)
3. user A -> logout and new sesskey in empty value
4. user B -> logout and new sesskey in empty value
5. so A and B share same sesskey.
After that sistuation,
6. user A login sucessful, and
user B load other page, that user B have user A's session value, so user A and B share session
with empty sesskey.
That is prevented from php session lib that empty value of sesskey no permitted.
thanks for advanced.
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=18855&edit=1