Re: session in https
| From: | Richard Lynch | Date: | Tue, 04 Dec 2001 21:38:43 +0000 |
| Subject: | Re: session in https | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-76595@lists.php.net to get a copy of this message | ||
Php Geko wrote:
> I am trying to set some sessions variables in an https (SSL):
> session_start();
> ...
> $row = $results[0];
> session_register("myses");
> if(session_is_registered("myses")){
>
$myses=array("id"=>$row["user_id"],"username"=>$row["username"],"password"=>
> $row["password"]);
> $myses=serialize($myses);
> }
>
> the to go to another php script in where I want to call my vars i use:
> <a href='".SECURE."delivery.php?sid=".$PHPSESSID."'>Please
> continue</a>
>
> in the delivery.php I want to call the session vars:
> session_start();
> ...
> $myses=unserialize($myses);
> echo "Session ID:.... " .$PHPSESSID .NL;
> echo "ID..." .$myses["id"] . NL;
> echo "username..." .$myses["username"] . NL;
>
> I receive blanks ... although the session is set in the /temp directory.
> It has a value in it but I don't have permission to read the value of my
> sess.
If PHP can't read tmp, sessions won't work at all.
But sounds more like you are not realizing that sessions do *NOT*
automatically transfer across the HTTPS / HTTP boundaries.
You'll need to track their ID and "hand transfer" it.
--
Like music? http://l-i-e.com/artists.htm