Re: session id contains illegal characters
| From: | Richard Lynch | Date: | Fri, 27 Oct 2006 17:24:15 +0000 |
| Subject: | Re: session id contains illegal characters | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-243757@lists.php.net to get a copy of this message | ||
On Thu, October 26, 2006 6:19 pm, Patrick Aljord wrote:
> $_SESSION['user_id']=$user_id;
> $_SESSION['user_login']=$user_login;
> $_SESSION['user_pass']=$user_pass;
> $_SESSION['user_level']=$user_level;
> $_SESSION['session_bool']="true";
> $sessionid = session_id();
echo "The sessionid sent to me is: $sessionid<hr />\n";
> $_SESSION['session_id']= $sessionid;
> $user_real_id=$_SESSION['user_id'];
> $user_real_login=$_SESSION['user_login'];
>
> $realsessionid = $_SESSION['session_id'];
>
> any idea what's wrong?
Whatever you've been cramming into session_id(), you shouldn't have
done that.
A username should be ENCOURAGED to have at least one non-alphanumeric
character.
session_id()s are NOT ALLOWED to have any non-alphanumeric characters.
--
Some people have a "gift" link here.
Know what I want?
I want you to buy a CD from some starving artist.
http://cdbaby.com/browse/from/lynch
Yeah, I get a buck. So?