Re: am i just a session tracking idiot?

I've just tried that. /foo is owned by nobody and is mode 777. there's 135M available on that partition. * Shane Wright (me@shanewright.co.uk) wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hi > > This may sound silly - but is there enough free disk space on whatever > partition /tmp is mounted on? > > Alternatively, as a workaround, you could create a new directory and give the > web server user permission to write to it and tell PHP to save sessions > there. (this is actually better from a security standpoint as well; less > chance of session hijacking). > > Cheers > > - -- > Shane > www.shanewright.co.uk > Public Key: http://www.shanewright.co.uk/files/public_key.asc > > > On Thursday 06 June 2002 6:31 pm, dan radom wrote: > > I can't seem to get session tracking to work to save my life. The end > > result I'm after is to store the value of the single column returned from > > this query .. SELECT user_id from users WHERE user_name = '$user_name' AND > > user_password = '$user_password' .. for use throughout the site. The > > current error I'm getting is "Warning: Failed to write session data > > (files). Please verify that the current setting of session.save_path is > > correct (/tmp) in Unknown on line 0" which is very strange, as > > session.save_path is set to /tmp, and tmp is "drwxrwxrwt 2 root > > root". The code is listed below. Any suggestions are greatly appreciated. > > > > dan > > > > > > > > > > <? > > > > // if ($user_name) { > > // class 'new uid' { var $row->user_id; }; > > // start_session(); > > // $abqSession = new abqnl; > > // $abqSession->user_id = $uid; > > // session_register("abqSession"); > > // } > > > > if ($user_name) { > > session_id($_GET['user_id']); > > session_start(); > > $foo="$row->user_id"; > > $_SESSION["uid"] = $foo; > > echo "$foo"; > > } > > > > > > include '/storage/apache/htdocs/test.radom.org/.siteconf.php'; > > > > echo "<br><br>"; > > > > if (!$user_name) { > > > > echo "<center>"; > > > > echo "<table cellspacing=10>"; > > echo "<tr>"; > > > > echo "<form method=post action=\"login.php\">"; > > > > echo "<td align=left>"; > > echo "user name"; > > echo "</td>"; > > > > echo "<td align=left>"; > > echo "<input size=12 name=\"user_name\">"; > > echo "</td>"; > > > > echo "</tr>"; > > echo "<tr>"; > > > > echo "<td align=left>"; > > echo "password"; > > echo "</td>"; > > > > echo "<td align=left>"; > > echo "<input type=\"password\" size=12 > > name=\"user_password\">"; > > echo "</td>"; > > > > echo "</tr>"; > > echo "<tr>"; > > > > echo "<td>"; > > echo "</td>"; > > > > echo "<td align=left>"; > > echo "<center>"; > > echo "<input type = \"submit\" value=\"submit\">"; > > echo "</center>"; > > echo "</td>"; > > > > echo "</form>"; > > > > echo "</tr>"; > > echo "</table>"; > > > > echo "</center>"; > > > > exit; > > > > } else > > > > $result = pg_exec ($database, "SELECT user_id from users WHERE user_name > > = '$user_name' AND user_password = '$user_password'"); > > > > if (!$result) { > > echo "query died\n"; > > exit; > > } > > > > if (pg_num_rows($result) == 0) { > > echo "<center>you have entered an invalid user name and password > > combination. please try again. new users may create an account from the > > sign up link above.</center>"; exit; > > } > > > > > > for ($i = pg_num_rows($result) - 1; $i >= 0; $i--) { > > if(!($row = pg_fetch_object($result))) > > continue; > > } > > > > echo "your user_id is "; > > > > pg_close($database); > > > > ?> > > </body> > > </html> > > - -- > Shane > www.shanewright.co.uk > Public Key: http://www.shanewright.co.uk/files/public_key.asc > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.0.6 (GNU/Linux) > Comment: For info see http://www.gnupg.org > > iD8DBQE8/6S75DXg6dCMBrQRAjhVAKCcAb1x2/rWZFqtDBKQTCYb4OCmdACgmax8 > eav61ozpEGIbHXzIYU7zt5A= > =EIC2 > -----END PGP SIGNATURE----- > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php