#23681 [Com]: Unclear error msg. when PHPSESSID manually deleted from URL by user

ID: 23681 Comment by: ross dot cornell at molins dot com Reported By: php at lapage dot com Status: Assigned Bug Type: Feature/Change Request Operating System: Linux PHP Version: 4.3.1 Assigned To: sas New Comment: This is causing me problems with php 4.3.1 and 5.0.1 It happens after the first session_start(); on every frame. My application is worldwide, someone in the far east was having this problem, i thought PHPSESSID was pulling illegal charactgers out of their character set. Then it happened to me on this laptop, running winXP. As far as i can tell it is client side, as it is only effecting the same 2 machines, so far anyway. Both with ie6. If anyone finds why this is, workaround etc, please mail me. Thanks Ross Previous Comments: ------------------------------------------------------------------------ [2003-05-20 03:16:52] derick@php.net I'm all for making this a notice instead, assigning to Sascha as he's the maintainer of ext/session. Derick ------------------------------------------------------------------------ [2003-05-18 10:41:04] php at lapage dot com Request for a better error msg. If the user disables cookies and changes the URL to http://domain.tld/form.php?PHPSESSID= Then the resulting Apache 1.3 error log reads: PHP Warning: session_start(): The session id contains illegal characters, valid characters are only a-z, A-Z and 0-9 in /zz/zzdomain/www/form.php on line 3 PHP Warning: Unknown(): The session id contains illegal characters, valid characters are only a-z, A-Z and 0-9 in Unknown on line 0 PHP Warning: Unknown(): Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp_php/zzdomainzz) in Unknown on line 0 <?php session_start(); @$ct= ++$_SESSION['count']; echo<<<EOF [$ct]<br><form method="get"> See hidden input<input type="submit" name="submit" value="Test"></form> <a href="$PHP_SELF?foo=bar">See new href</a> EOF; ?> ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=23681&edit=1