PHP 4 SESSION ONLY COOKIE - 1 attachment
| From: | Dominik W. | Date: | Thu, 13 Nov 2003 23:24:10 +0000 |
| Subject: | PHP 4 SESSION ONLY COOKIE - 1 attachment | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-169633@lists.php.net to get a copy of this message | ||
With the following script, i cannot create a session with
session.use_only_cookies 'on'
When i login, the server NEVER set a cookie with the sessionID on my
client... and he adds the SID to all my relating links on page.
What i want is a session, that saves the sid in a cokkie at the clients
pc and NOT to add the SID to the relating links.
Thats my sourcecode:
Can U give me an answer what is wrong?
- Cookies are allowed in my browser
- session.use_cookies 'on'
- transid 'on' (could only be changed by serveradmins)
<?PHP
//error_reporting(15);
ini_set("session.use_only_cookies", 1);
////////////////////////////////////////////////////////Verbindung
öffnen//////////////////
include('connect.php');
$verbindung = @mysql_connect($IP,$USER,$PWD);
if (!$verbindung){
echo "Keine Verbindung möglich!\n";
exit;
}else{
/////////////////////////////////LOGIN///////////////////////////////////
////////////
//cookieabfrage
$logincookiename = $tblprefix.'SID'; //def. cookiename
if($$logincookiename != ''){
session_id($$logincookiename); //SID auf die im Cookie
gespeicherte setzen
}
//cookieabfrage
session_start();
$_SESSION['zaehler'] = 1;
$test = session_id();
$db_select = @MYSQL_SELECT_DB($DB);
$result = mysql_query("SELECT username FROM ".$tblprefix."_users WHERE
sessionID = 'session_id()' ");
$sessionsfound = mysql_num_rows($result);
//Session deleten wenn nicht eingeloggt
if ($sessionsfound != 1){
session_unset();
setcookie( session_name() ,"",0,"/");
$_SESSION = array();
session_destroy();
}
$session_id_string = session_id();
//////////////login - TRUE
if (($login == 'true') && ($session_id_string == '')){
$login = '';
$abfrage = "SELECT username, password FROM ".$tblprefix."_users WHERE
username = '$loginname'";
$erg = mysql_db_query($DB,$abfrage,$verbindung);
list ($username,$password) = mysql_fetch_row($erg);
if ($username == ''){
$content = 'errors/login.php?error=loginname';
}else{
$abfrage = "SELECT loginversuche FROM ".$tblprefix."_users WHERE
username = '$username'";
$erg = mysql_db_query($DB,$abfrage,$verbindung);
list ($loginversuche) = mysql_fetch_row($erg);
if($loginversuche < 5){
if($password == md5($loginpassword)){
$abfrage = "SELECT sessionID FROM ".$tblprefix."_users
WHERE username = '$username'";
$erg = mysql_db_query($DB,$abfrage,$verbindung);
list ($sessionID) = mysql_fetch_row($erg);
$abfrageupdate = "UPDATE ".$tblprefix."_users SET
lastsessionID = '$sessionID' WHERE username = '$username'";
$ergupdate = mysql_db_query($DB,$abfrageupdate,
$verbindung);
$abfrageupdate = "UPDATE ".$tblprefix."_users SET
loginversuche = '0' WHERE username = '$username'";
$ergupdate = mysql_db_query($DB,$abfrageupdate,
$verbindung);
if($dauerhafteslogin=='true'){
$dauerhafteslogin='';
setcookie($logincookiename ,session_id(),0,"/");
//cookie fuer dauerhaftes Login setzen
}
session_start();
$_SESSION['zaehler'] = 1;
$abfrageupdate = "UPDATE ".$tblprefix."_users SET
sessionID = session_id() WHERE username = '$username'";
$ergupdate = mysql_db_query($DB,$abfrageupdate,
$verbindung);
$content = 'login/status.php';
}else{
++$loginversuche;
$abfrageupdate = "UPDATE ".$tblprefix."_users SET
loginversuche = '$loginversuche' WHERE username = '$username'";
$ergupdate = mysql_db_query($DB,$abfrageupdate,
$verbindung);
$content = 'errors/login.php?error=password';
}
}else{
$content = 'errors/login.php?error=accountblocked';
}
}
}
////////////////////ENDE login TRUE///////////////////////
if (session_id() != ''){
echo "u are logged in!<br>";
echo session_id();
}else{
echo"not logged in";
}
?>
}
begin 644 Warcraft III.lnk
M3````
$4@`````P``````$;3``(``,"^-_O^A,,!##!AWF$PP$`
MY_'[_H3#0#PP``````0``````````````````$!%`?4.!/T"#J.FD0
MHM@("LP,)T9"]%.EP````````````````````````.@Q`````#4+0X
M$!34$E%3$4"0P$.^^U"P$.#HO+4``4P!P&D90!L&4````6
M$0,0`````.R^[;A5T%20U)!?C("PP$.^^.R^[;CHO+4```
M5P!A'(8P!R&$9@!T",P`!@5`R#PP[+^EN(!705)#4D%^
M,2Y%6$4`#@P$.^^.R_I;CHO+4``5P!A'(8P!R&$9@!T"``
M20!)$D+@!E'@90``!P`!>``'```$``<``-P```````!=
M```&P``,`#=%38H$``$1!5$5.(#<U1T(13I<4W!I96QE7%=A<F-R
M869T(#-<5V%R8W)A9G0@24E)+F5X90`%!%#H7!3'`:0!E&P`90!<
M%<80!R&,<@!A&8=`@#,)0!%#H7!3':0!E&P90!<%<`
M80!R&,<@!A&8=`@#,7!7&$<@!C'(80!F'0(!)$D20N
+&4>!E```````
`
end