Re: session id changing all the time on some pc's

"Matthew Sims" <matt@killermookie.org> wrote in message news:50495.208.44.135.18.1088792934.squirrel@208.44.135.18... > > > > > "Zilvinas Saltys" <araki@esu.lt> wrote in message > > news:20040702200258.14e44393.araki@esu.lt... > >> On Fri, 2 Jul 2004 12:21:34 -0400 > >> Gerard Samuel <php-general@trini0.org> wrote: > >> > >> > On Friday 02 July 2004 12:12 pm, Zilvinas Saltys wrote: > >> > > I looked at server configurations but i couldn't find anything > > usefull. I > >> > > tried to change IE settings to accept all cookies but nothing > >> changed. > >> > > > >> > > Maybe someone knows where's the problem.. > >> > > >> > I dont know of all the specifics of your situation, but I know when it > >> > happened to my code, it boiled down to a cookie problem. (I never > >> > experienced it first hand unless I turned off cookies in my own > >> browser. > > I > >> > saw it was happening for other users on my code). > >> > So what I eventually did, was modified my code to work with browsers > > that do > >> > not store cookies (for what ever reason that may be). > >> > By that I mean to pass the session id in the url and in forms... > >> > >> I know i can pass the session id by url.. But this solution is ugly and > > hopefully not the only one there is.. > >> The problem is as i understand IE is not accepting the cookie. So the > > session id allways regenerates. Everything works fine with mozilla. > >> > >> The strangest part of the show is some pc's that have IE installed > >> accepts > > those cookies. I turned 'accept ALL cookies'. Same result.. > >> > >> Maybe ... this could be a domain problem.. > >> > >> The only thing i want to know is all the truth about IE (6?) and cookies > > :) > >> > >> Heeelp :) > > > > Sorry to say that but just DO NOT use cookies. You will always have > > problems > > with users having weird cookie settings in their browser. Cookies are fine > > for intranets where you know the infrastructure you are dealing with. > > Passing the session id via GET/POST may be ugly but makes you independent > > of > > the browser's cookie settings. > > > > Regards, Torsten Roehr > > I can agree with this. I created an internal website for my company that > requires login. And even then some users a restricted to certain areas of > the website depending on their user level. Passing the $_SESSION variables > around was just plain easier than setting up cookies. I also felt I had a > greater control over the whole process from login to logout. > > Instead of passing the session_id through the URL ($_GET) just assign it > to $_SESSION and pass that around. Then it'll stay transparent to the > user. Could you describe the last paragraph a bit more in detail? Thanks in advance! Torsten