Re: session id changing all the time on some pc's

> "Zilvinas Saltys" <araki@esu.lt> wrote in message > news:20040702200258.14e44393.araki@esu.lt... >> On Fri, 2 Jul 2004 12:21:34 -0400 >> Gerard Samuel <php-general@trini0.org> wrote: >> >> > On Friday 02 July 2004 12:12 pm, Zilvinas Saltys wrote: >> > > I looked at server configurations but i couldn't find anything > usefull. I >> > > tried to change IE settings to accept all cookies but nothing >> changed. >> > > >> > > Maybe someone knows where's the problem.. >> > >> > I dont know of all the specifics of your situation, but I know when it >> > happened to my code, it boiled down to a cookie problem. (I never >> > experienced it first hand unless I turned off cookies in my own >> browser. > I >> > saw it was happening for other users on my code). >> > So what I eventually did, was modified my code to work with browsers > that do >> > not store cookies (for what ever reason that may be). >> > By that I mean to pass the session id in the url and in forms... >> >> I know i can pass the session id by url.. But this solution is ugly and > hopefully not the only one there is.. >> The problem is as i understand IE is not accepting the cookie. So the > session id allways regenerates. Everything works fine with mozilla. >> >> The strangest part of the show is some pc's that have IE installed >> accepts > those cookies. I turned 'accept ALL cookies'. Same result.. >> >> Maybe ... this could be a domain problem.. >> >> The only thing i want to know is all the truth about IE (6?) and cookies > :) >> >> Heeelp :) > > Sorry to say that but just DO NOT use cookies. You will always have > problems > with users having weird cookie settings in their browser. Cookies are fine > for intranets where you know the infrastructure you are dealing with. > Passing the session id via GET/POST may be ugly but makes you independent > of > the browser's cookie settings. > > Regards, Torsten Roehr I can agree with this. I created an internal website for my company that requires login. And even then some users a restricted to certain areas of the website depending on their user level. Passing the $_SESSION variables around was just plain easier than setting up cookies. I also felt I had a greater control over the whole process from login to logout. Instead of passing the session_id through the URL ($_GET) just assign it to $_SESSION and pass that around. Then it'll stay transparent to the user. --Matthew Sims --<http://killermookie.org>