Re: session in https
| From: | php geko | Date: | Tue, 04 Dec 2001 22:23:25 +0000 |
| Subject: | Re: session in https | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-76613@lists.php.net to get a copy of this message | ||
"Richard Lynch" <ceo@l-i-e.com> wrote in message
news:20011204213751.95410.qmail@pb1.pair.com...
> Php Geko wrote:
>
> > I am trying to set some sessions variables in an https (SSL):
> > session_start();
> > ...
> > $row = $results[0];
> > session_register("myses");
> > if(session_is_registered("myses")){
> >
>
$myses=array("id"=>$row["user_id"],"username"=>$row["username"],"password"=>
> > $row["password"]);
> > $myses=serialize($myses);
> > }
> >
> > the to go to another php script in where I want to call my vars i use:
> > <a
> > href='".SECURE."delivery.php?sid=".$PHPSESSID."'>Please
> > continue</a>
> >
> > in the delivery.php I want to call the session vars:
> > session_start();
> > ...
> > $myses=unserialize($myses);
> > echo "Session ID:.... " .$PHPSESSID .NL;
> > echo "ID..." .$myses["id"] . NL;
> > echo "username..." .$myses["username"] . NL;
> >
> > I receive blanks ... although the session is set in the /temp directory.
> > It has a value in it but I don't have permission to read the value of my
> > sess.
>
> If PHP can't read tmp, sessions won't work at all.
>
> But sounds more like you are not realizing that sessions do *NOT*
> automatically transfer across the HTTPS / HTTP boundaries.
> You'll need to track their ID and "hand transfer" it.
>
> --
> Like music? http://l-i-e.com/artists.htm
>
richard, i use session_id($sid); in the secure part to use the session id og
the nonsecure part.
In the secure part I can access the session vars that I created in the
non-secure part. But I can't access the ones I created in the secure part.
Luc