Re: sessions broken when redirected?

I don't know 100& for sure, but I believe since it is going to an https link, it considers it a new domain(or something) and that's why the sessions aren't persisting. The same thing happens if you redirect from say www.domain.com to www2.domain.com. I odn't know any way around it, except encoding, passing in URL and decoding on the other side. jon ----- Original Message ----- From: <elists@elliston.net> To: "Php-General@Lists. Php. Net" <php-general@lists.php.net> Sent: Thursday, March 29, 2001 2:57 PM Subject: [PHP] sessions broken when redirected? > I've searched the archives and relevant web sites to no avail, so as a > last resort I'm turning to this knowledgeable group of people. > > I'm working to set up a user authentication system using native PHP 4 > sessions on a box running Apache, mod_perl, mod_ssl, PHP (the lastest), > etc. > > PHP was compiled with the following options: > > './configure' '--with-sybase-ct=/usr/local/freetds' > '--with-config-file-path=/usr/local/lib' '--with- > apache=../apache_1.3.19' '--enable-track-vars' '--enable-memory- > limit=yes' > > Here's the problem: > The browser is redirected by Apache (in the current setup, which for > other reasons won't be changed) from a URL like > http://somebody.com/foo/bar to a URL like > https://somebody.com/bar. > > I have had no luck getting sessions, session ids, HTTP_POST_VARS, etc to > successfully survive the redirect when the user moves between pages in > the site. (passing variables through the url works, but we need > something more secure than that). > > My feeling is that I'm missing something obvious. Cookies are enabled > and working. I can start sessions and store variables, but only within > one page. Once the user goes through a redirect (to the same server), > everything is lost. It doesn't _seem_ like this should be a limitation > of PHP, but maybe it is. > > Can anyone help clarify this? > > Thanks, > Andrew Elliston > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net >