R: Login in https, site in http problem

From: Date: Mon, 17 Sep 2001 10:29:05 +0000
Subject: R: Login in https, site in http problem
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-67583@lists.php.net to get a copy of this message
Check if the browser transmit the Session ID in the first http connection, and if the SID transmitted in https is equal to the SID transmitted in http... it's possible that turning https to http cause that php think that it's another domain... Look at the settings in php.ini or use ini_alter function... ------------------------------ Federico flagzenNO-SPAM@libero.it ------------------------------ Ben Edwards <ben@videonetwork.org> wrote in message 4.2.0.58.20010915120711.00a0f4e0@pop.spamcop.net... > We have a site which logs in using https (secure site) but the rest of the > site is in http (non-secure site). We are doing this because we do not > have/want to pay for a secure key. The login form posts back to itself so > the whole login is in https. > > The problem is the session variables set in https (username and ip address) > are not available in http. Has anybody got any word rounds/solutions for this? > > Regards, > Ben > *+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+ > * Ben Edwards ben@videonetwork.org +352 091 429995 * > * This Email account is protected by http://www.spamcop.net * > * ALL spam is reported to ISP and there network provider * > * Homepage http://www.gifford.co.uk/~bedwards * > * i-Contact Progressive Video http://www.videonetwork.org * > * Smashing the Corporate image http://www.subvertise.org * > * Bristol's radical news > http://www.bristle.co.uk * > * Open Directory Project http://www.dmoz.org * > *+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+*+

« previous php.general (#67583) next »