RE: [PHP] phpbb / sessionid nightmare

From: Date: Wed, 02 May 2007 22:12:00 +0000
Subject: RE: [PHP] phpbb / sessionid nightmare
Groups: php.general 
Request: Send a blank email to php-general+get-254298@lists.php.net to get a copy of this message
On Sat, April 28, 2007 4:46 pm, Brad Sumrall wrote: > The cookie it's self says > PHPSESSID=26b7974a5d71c7d0bfebbf71750dac7b > Path=/ > Host=www.domain.com > > When I go to the jacked up page, I pickup this one > PHPSESSID=a787e077dd18ed18cb824f664d38315d > Path=/ > Host=domain.com As I recall, it depends on your browser settings, maybe, but having www.domain.com and domain.com will probably break at least *SOME* browsers/users with strict security settings. Get your cookies to agree on the domain, and get the URLs to always be the same as well. This is usually achieved with DNS settings and Apache in one place, rather than dinking around in PHP with re-directs, but if all you have is a hammer... > In the directory structure, I have gone from > /phpbb/login.php > to > /contest_stories.php?cid=8 > > Is the Path or the fact that I am going to www.domain.com to > domain.com have > anything to do with it? The path of "/" matches both those URLs, and *any* URL for that matter, so that's fine. -- Some people have a "gift" link here. Know what I want? I want you to buy a CD from some indie artist. http://cdbaby.com/browse/from/lynch Yeah, I get a buck. So?

« previous php.general (#254298) next »