#27403 [Bgs]: session maintenance across SSL and Non SSL pages

ID: 27403 User updated by: venky at smartxp dot com Reported By: venky at smartxp dot com Status: Bogus Bug Type: Session related Operating System: Linux PHP Version: 4.3.4 New Comment: I feel sorry that I thought PHP was not working properly with SSL. But the reason this was happening is: When I go to SSL page from Non SSL page then the user name in server is getting changed so the session file created in the temp is owned by SSL user name in SSL page and when in non SSL page user is different so PHP is unable to access the session file. We have solved this problem making the user name same for SSL and Non SSl page. Sorry for my poor english. Thanks Previous Comments: ------------------------------------------------------------------------ [2004-02-26 07:57:55] venky at smartxp dot com I am doing this on online server. In same page with same session id it is unable to open the session file and if i see on the server the session file created is with read and write permissions to the root user only. SO the error unable to open is coming how to set the whole file permissions for the session file. ------------------------------------------------------------------------ [2004-02-26 07:14:13] sniper@php.net Sorry, but your problem does not imply a bug in PHP itself. For a list of more appropriate places to ask for help using PHP, please visit http://www.php.net/support.php as this bug system is not the appropriate forum for asking support questions. Thank you for your interest in PHP. You're doing something wrong, this works absolutely fine when a) script is correct b) configuration is correct. ------------------------------------------------------------------------ [2004-02-26 07:09:28] venky at smartxp dot com Description: ------------ When i access through http://mydomain/start.php it creates a session file and start session. Again when i access same file in same browser through SSL https://mydomain/start.php Warning: session_start(): open(/tmp/sess_5e99b05aa4e84d8304778ab34ae8e68a, O_RDWR) failed: Permission denied (13) in /home/www/hollywoodclicks/index.php on line 1 Warning: session_start(): Cannot send session cache limiter - headers already sent (output started at /home/www/hollywoodclicks/index.php:1) in /home/www/hollywoodclicks/index.php on line 1 Reproduce code: --------------- start.php <? session_start(); ?> Expected result: ---------------- When i access through http://mydomain/start.php it creates a session file and start session. Again when i access same file in same browser through SSL https://mydomain/start.php Warning: session_start(): open(/tmp/sess_5e99b05aa4e84d8304778ab34ae8e68a, O_RDWR) failed: Permission denied (13) in /home/www/hollywoodclicks/index.php on line 1 Warning: session_start(): Cannot send session cache limiter - headers already sent (output started at /home/www/hollywoodclicks/index.php:1) in /home/www/hollywoodclicks/index.php on line 1 Actual result: -------------- It should maintain maitain the same session across SSL and Non SSL pages ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=27403&edit=1