Re: PHP 4.0 Bug #4495 Updated: trans-sid failure on forms
| From: | DannyM | Date: | Thu, 18 May 2000 16:07:03 +0000 |
| Subject: | Re: PHP 4.0 Bug #4495 Updated: trans-sid failure on forms | ||
| References: | 1 2 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-18919@lists.php.net to get a copy of this message | ||
All, I did end updoing the hidden form field thing. But my thoughts are
the whole point of trans-sid is to be just that, transparent. And by having
to code in a hidden form field with the SID, then its not completely
transparent... Also answer me this, why shouldn't it append the SID to a
form post?
Thanks!
Danny
----- Original Message -----
From: Geff Hanoian <boing@boing.com>
To: <jamestkirkiii@hotmail.com>; <php-dev@lists.php.net>
Sent: Thursday, May 18, 2000 4:00 AM
Subject: Re: [PHP-DEV] PHP 4.0 Bug #4495 Updated: trans-sid failure on forms
> Joey,
>
> I have a quick possibly stupid question. Okay, it's definitely a stupid
> question. Let's say you do set an input type=hidden field to the SID.
How
> reactivate the session given a session ID? something like:
>
> ----
>
> <?php
>
> session_start();
> session_id($old_session_sid);
>
> // but by doing this didn't I just create a session id that
> // I won't ever use with the original "session_start();"????
> ?>
>
> <form method=post action=#>
> <input type=hidden name="old_session_sid" value="<?php echo
> $SID;?>">
> </form>
>
> ----
>
> any suggested corrections welcome. And why wouldn't you want to maintain
a
> session over a post? The cookie method will maintain the session yes the
> non-cookie method (or whatever you call it, URL method?) won't. So we get
> two sets of behavior, one for URL and one for cookies? :(
>
> Thanks much for the time.
>
> Geff
>
> > ID: 4495
> > Updated by: joey
> > Reported By: jamestkirkiii@hotmail.com
> > Status: Closed
> > Bug Type: Session related
> > Assigned To:
> > Comments:
> >
> > PHP should not add the sid to the action of a form, at least,
> > not one using the POST method...I guess some would argue
> > on whether on not to do it under GET.
> >
> > In either case, just add an <input type="hidden"> to get the
> > desired effect
> >
> > Full Bug description available at:
> > http://bugs.php.net/?id=4495
>
>
>