Bug #18855 [Com]: PHPSESSID, The Session Key is chagned in same page
| From: | otr214430 at gmail dot com | Date: | Tue, 05 Aug 2014 09:49:43 +0000 |
| Subject: | Bug #18855 [Com]: PHPSESSID, The Session Key is chagned in same page | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-186977@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=18855&edit=1
ID: 18855
Comment by: otr214430 at gmail dot com
Reported by: number3 at windogs dot com
Summary: PHPSESSID, The Session Key is chagned in same page
Status: No Feedback
Type: Bug
Package: Session related
Operating System: Linux 2.4.18
PHP Version: 4.2.2
Block user comment: N
Private report: N
New Comment:
VIRUS REMOVAL
Is Your Computer Sluggish or Plagued With a Virus? â If So you Need Online Tech Repairs
As a leader in online computer repair, Online Tech Repairs Inc has the experience to deliver
professional system optimization and virus removal.Headquartered in Great Neck, New York our
certified technicians have been providing online computer repair and virus removal for customers
around the world since 2004.
Our three step system is easy to use; and provides you a safe, unobtrusive, and cost effective
alternative to your computer service needs. By using state-of-the-art technology our computer
experts can diagnose, and repair your computer system through the internet, no matter where you are.
Our technician will guide you through the installation of Online Tech Repair Inc secure software.
This software allows your dedicated computer expert to see and operate your computer just as if he
was in the room with you. That means you don't have to unplug everything and bring it to our
shop, or have a stranger tramping through your home.
From our remote location the Online Tech Repairs.com expert can handle any computer issue you want
addressed, like:
⢠- System Optimization
⢠- How it works Software Installations or Upgrades
⢠- How it works Virus Removal
⢠- How it works Home Network Set-ups
Just to name a few.
If you are unsure of what the problem may be, that is okay. We can run a complete diagnostic on your
system and fix the problems we encounter. When we are done our software is removed; leaving you with
a safe, secure and properly functioning system. The whole process usually takes less than an hour.
You probably couldn't even get your computer to your local repair shop that fast!
Call us now for a FREE COMPUTER DIAGONISTIC using DISCOUNT CODE (enter AGENT CODE HERE) on
+1-914-613-3786 or chat with us on www.onlinetechrepairs.com.
Previous Comments:
------------------------------------------------------------------------
[2014-08-01 11:46:12] otr214430 at gmail dot com
Problem: HP Printer not connecting to my laptop.
I had an issue while connecting my 2 year old HP printer to my brother's laptop that I had
borrowed for starting my own business. I used a quick google search to fix the problem but that did
not help me.
I then decided to get professional help to solve my problem. After having received many quotations
from various companies, i decided to go ahead with Online Tech Repair (www.onlinetechrepairs.com).
Reasons I chose them over the others:
1) They were extremely friendly and patient with me during my initial discussions and responded
promptly to my request.
2) Their prices were extremely reasonable.
3) They were ready and willing to walk me through the entire process step by step and were on call
with me till i got it fixed.
My Experience
I loved the entire friendly conversation that took place with them. They understood my needs clearly
and acted upon the solution immediately. Being a technical noob, i sometimes find it difficult to
communicate with tech support teams. It was a very different experience with the guys at Online Tech
Repairs. You can check out their website www.onlinetechrepairs.com or call them on 1-914-613-3786.
Would definitely recommend this service to anyone who needs help fixing their computers.
Thanks a ton guys. Great Job....!!
------------------------------------------------------------------------
[2002-09-19 13:24:44] kalowsky@php.net
No feedback was provided. The bug is being suspended because
we assume that you are no longer experiencing the problem.
If this is not the case and you are able to provide the
information that was requested earlier, please do so and
change the status of the bug back to "Open". Thank you.
------------------------------------------------------------------------
[2002-08-13 21:50:24] kalowsky@php.net
I'm not sure I understand this bug completely, so bare with me. From what I gather, your code
writes a new userid based upon the userinfo->id, where the PHPSESSID is. From your example
though I don't see how this could be possible as the $PHPSESSID won't change during the
execution of the page.
But in any case, can you please provide a short sample script to reproduce this? It would help.
------------------------------------------------------------------------
[2002-08-11 08:30:54] number3 at windogs dot com
Hi,
i have used the php session with pgsql handler, for user authencation.
but I find that the php session key, PHPSESSID is changed same page. that sistuation is not always,
but a few time.
my debug code below.
--------------------------------------------
session_register("userinfo");
$q_update = "UPDATE session SET userid = '".$userinfo->id."' WHERE
sesskey = '".$PHPSESSID."'";
pg_exec($conn, $q_update);
--------------------------------------------
the register value "userinfo" is class var.
in debug result, the empty PHPSESSID value, not null value value is recorded.
and Session key is threr changed.
1. orginal sesskey
2. empty sesskey
3. new sesskey
That result in no login because sesskey is changed.
why that cause ?
addition, why be The PHPSESSID empty value ?
that is not normal. that situtaion result in session share.
1. user A -> login with sesskey1(sucess)
2. user B -> login with sesskey2(sucess)
3. user A -> logout and new sesskey in empty value
4. user B -> logout and new sesskey in empty value
5. so A and B share same sesskey.
After that sistuation,
6. user A login sucessful, and
user B load other page, that user B have user A's session value, so user A and B share session
with empty sesskey.
That is prevented from php session lib that empty value of sesskey no permitted.
thanks for advanced.
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=18855&edit=1