Sessions in PHP4.0.3pl1
| From: | Roberto Cespa | Date: | Mon, 16 Oct 2000 11:55:03 +0000 |
| Subject: | Sessions in PHP4.0.3pl1 | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-20349@lists.php.net to get a copy of this message | ||
Hi there, I read all the previous messages with the word session in the
body, but I found no answer to my problem.
I upgraded to php4.0.3pl1 because of a strange behaviour of php4.0.1pl2
with --enable-trans-sid feature turned on.
Well, with 4.0.1, the problem was that sometimes, the link with the
appended session id were displayed in the browser window, like this:
ef="/index.php?PHPSESSID=7687aff8c7ea487f67f093927fd5f661>Main Page </a>
What you see is not a typo! It seems that the php parser does something
strange while adding the php sessid, just like truncating some lines.
So I decided to upgrade to 4.0.3pl1.... I think it's even worse!
First of all it adds the sessid even to images ( eg.: <IMG
src="img/everyware_logo_pic.gif?PHPSESSID=7e0747943c626a7fc68cfe0a423489ec"
width="200" height="82"> )
Second:
if it parses a <FORM> tag it adds a <INPUT TYPE=HIDDEN NAME=PHPSESSID
VALUE=_put_something_weird_here_>. While it's nice, it does not work for
me at all. In fact I can see the file
/tmp/sess_put_something_weird_here_ filled with all the data, but the
next page will not read these data, even if the session id is correct
Third:
Even nicer! With Netscape Communicator 4.75 for Linux it writes a
PHPSESSID in the html source, but Netscape shows another one in the
status bar!!!
HTML code: <A
href="aggiungi_sito.php?PHPSESSID=5a0bc3789c4b9037440e7a64dadbc64c">Aggiungi
un sito al Network di Colombo2000</A>
Status bar (and really used PHPSESSID):
aggiungi_sito.php?PHPSESSID=c703849ae7dc9799769f58f4be33451e
As you can see the PHPSESSID is different
Fourth:
After all these strange things I decided to try out the cookie based
configuration, so I edited my php.ini file, swapped session.use_cookies
value to 1, restarted apache and....
nothing happened! No cookie is sent to my browser, no alert is shown on
the display telling me that the header were already sent, and
session_start() is the very first line of php code!
Ok, I tried recompiling everything without the --enable-trans-sid ....
Same thing.
I looked into phpinfo() and cookies seem to be enabled.
What now?
Results of today tests:
Rolling back to php4.0.1pl2
Thank you for your help,
Roberto
--
Colombo2000
http://www.colombo2000.it
Il tuo prossimo viaggio comincia qui
+---------------------------------------------+
| Roberto Cespa |
| Responsabile Ricerca e Sviluppo Colombo2000 |
| Email: rcespa@colombo2000.it |
| Mobile: +39-380-3042732 |
+---------------------------------------------+