Sessions in PHP4.0.3pl1

From: Date: Mon, 16 Oct 2000 11:55:03 +0000
Subject: Sessions in PHP4.0.3pl1
Groups: php.general 
Request: Send a blank email to php-general+get-20349@lists.php.net to get a copy of this message
Hi there, I read all the previous messages with the word session in the body, but I found no answer to my problem. I upgraded to php4.0.3pl1 because of a strange behaviour of php4.0.1pl2 with --enable-trans-sid feature turned on. Well, with 4.0.1, the problem was that sometimes, the link with the appended session id were displayed in the browser window, like this: ef="/index.php?PHPSESSID=7687aff8c7ea487f67f093927fd5f661>Main Page </a> What you see is not a typo! It seems that the php parser does something strange while adding the php sessid, just like truncating some lines. So I decided to upgrade to 4.0.3pl1.... I think it's even worse! First of all it adds the sessid even to images ( eg.: <IMG src="img/everyware_logo_pic.gif?PHPSESSID=7e0747943c626a7fc68cfe0a423489ec" width="200" height="82"> ) Second: if it parses a <FORM> tag it adds a <INPUT TYPE=HIDDEN NAME=PHPSESSID VALUE=_put_something_weird_here_>. While it's nice, it does not work for me at all. In fact I can see the file /tmp/sess_put_something_weird_here_ filled with all the data, but the next page will not read these data, even if the session id is correct Third: Even nicer! With Netscape Communicator 4.75 for Linux it writes a PHPSESSID in the html source, but Netscape shows another one in the status bar!!! HTML code: <A href="aggiungi_sito.php?PHPSESSID=5a0bc3789c4b9037440e7a64dadbc64c">Aggiungi un sito al Network di Colombo2000</A> Status bar (and really used PHPSESSID): aggiungi_sito.php?PHPSESSID=c703849ae7dc9799769f58f4be33451e As you can see the PHPSESSID is different Fourth: After all these strange things I decided to try out the cookie based configuration, so I edited my php.ini file, swapped session.use_cookies value to 1, restarted apache and.... nothing happened! No cookie is sent to my browser, no alert is shown on the display telling me that the header were already sent, and session_start() is the very first line of php code! Ok, I tried recompiling everything without the --enable-trans-sid .... Same thing. I looked into phpinfo() and cookies seem to be enabled. What now? Results of today tests: Rolling back to php4.0.1pl2 Thank you for your help, Roberto -- Colombo2000 http://www.colombo2000.it Il tuo prossimo viaggio comincia qui +---------------------------------------------+ | Roberto Cespa | | Responsabile Ricerca e Sviluppo Colombo2000 | | Email: rcespa@colombo2000.it | | Mobile: +39-380-3042732 | +---------------------------------------------+

« previous php.general (#20349) next »