#23689 [NEW]: serializing - deserializing session data doesn't work

From: marty at excudo dot net Operating system: linux PHP version: 4.3.1 PHP Bug Type: Session related Bug description: serializing - deserializing session data doesn't work For an intranet application i wrote a function that can store the current position/page, by serializing the $_GET, $_POST and $_SESSION data and storing them, along with the url, in the database (except for session information that contains login-information of course). This is when i found out, that when you retrieve the serialized session data from the database, then deserialize it and put it back into the session (having unset() it first of course), php starts to mess up. Initially, the data you stored will be placed back into the session (a print_r() reveals this) and everything seems fine. But as soon as you navigate away from the page, suddenly the session data gets overwritten with the data from before the restoration procedure. (which is even more strange cause it had been unset()!). I created an example that you can try out for yourself http://www.marinesofficers.com/test/example.html that page contains screenshots, that explain once again what happens, in detail, and a link so you can actually go through the steps yourself. The bug showed on a server with PHP version 4.3.1 and i've tested it on two other servers (with a slightly lower version) as well. Same results. -- Edit bug report at http://bugs.php.net/?id=23689&edit=1 -- Try a CVS snapshot: http://bugs.php.net/fix.php?id=23689&r=trysnapshot Fixed in CVS: http://bugs.php.net/fix.php?id=23689&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=23689&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=23689&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=23689&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=23689&r=support Expected behavior: http://bugs.php.net/fix.php?id=23689&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=23689&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=23689&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=23689&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=23689&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=23689&r=dst IIS Stability: http://bugs.php.net/fix.php?id=23689&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=23689&r=gnused