Re: Session ID

you also have...

      _SERVER["HTTP_COOKIE"] PHPSESSID=a0e3bd3ba5624c9fa627cd0b14021969





----- Original Message -----
From: "Keith Sellars" <Keith(at)webgraffix.com>
To: <hwg-languages(at)hwg.org>
Sent: Tuesday, September 17, 2002 10:15 PM
Subject: Re: Session ID


> http://www.schoolpad.net/lauri_phpinfo.php
>
> Paul and everyone,
>
> Above is the phpinfo link if this will help at all.
>
> Thanks,
> Keith D Sellars
> WebGraffix
> www.webgraffix.com
>
> "Making database sites seem easy"
>
> ----- Original Message -----
> From: "Paul Roberts" <mail(at)paul-roberts.com>
> To: "Keith Sellars" <Keith(at)webgraffix.com>
> Cc: <hwg-languages(at)hwg.org>
> Sent: Tuesday, September 17, 2002 4:00 PM
> Subject: Re: Session ID
>
>
> Hi Keith just tried the url's and
> http://www.schoolpad.net/webadmin/indexTEST4.php
> did not set a cookie it just prints the session id to the screen, and I'm
on
> accept all cookies, medium made no difference.
>
> Paul Roberts
> http://www.paul-roberts.com
> mail(at)paul-roberts.com
> ++++++++++++++++++++++++
> ----- Original Message -----
> From: "Keith Sellars" <Keith(at)webgraffix.com>
> To: <hwg-languages(at)hwg.org>
> Sent: Tuesday, September 17, 2002 5:25 PM
> Subject: Re: Session ID
>
>
> Hank and everyone,
>
> Here is the situation so far regarding this problem:
>
> I have run several scripts to check things (gotten them to run them from
> their location):
>
> 1)
> http://www.schoolpad.net/webadmin/cookie1.php followed by
> http://www.schoolpad.net/webadmin/cookie2.php.  This told me that their
> system was indeed setting cookies.
>
> 2)
> http://www.schoolpad.net/webadmin/indexTEST4.php.  This told me that
> session_start and session_register were indeed working properly.
>
> NOW, here's the dilemma.  When a user logs in to the system, session_start
> and session_register are invoked to assign the user a PHPSESSID, which is
> then stored in the database.  Doing the above (test4.php) DOES indeed show
> that it is possible to assign a Session ID to the user and that cookies
can
> be set (cookie1.php and cookie2.php).  However, when our program is run
from
> their server through a normal login means, for some reason, a PHPSESSID
> appears to NOT be assigned.  Since the script kicks the user out to an
> "error" page if a PHPSESSID is equal to "" (no value), this becomes a
> problem.  This is what I cannot figure out - if I can run the
indexTEST4.php
> script and see that it is indeed setting the PHPSESSID, then why on earth
> would it NOT be working when the program is run from our servers?
>
> Here is the basic sequence of events when a user logs in:
> The user goes to login.php.
> The user types in their password/username.
> The login.php script runs several checks to determine what level of admin
> the user is, and then inserts several values into one of the database
> tables, one value which is $PHPSESSID.
> Upon a successful match of password and username, the user is then
> redirected to webadmin/index.php.
> The webadmin/index.php file calls the following function:
> getLogin($PHPSESSID, $REMOTE_ADDR, $DBName, 1)
> ...from a central PHP file (file that contains most of the common
> functions).
> This central PHP file then runs the getLogin function which runs a
database
> query that contains:
> Sessions WHERE SessionID = '$PHPSESSID'" (thus calling the value that has
> just been written to the database and returning this value to the
> webadmin/index.php page).
> The webadmin/index.php script then checks for the existence of a
$PHPSESSID
> value. Upon finding a value present, it present the appropriate content to
> the user. Upon finding that no $PHPSESSID value exists, the user is
> presented with text that reflects a log in error.
>
> Based on the test scripts I've posted above, and the sequence of events
that
> I describe directly above, what could be the cause of this?  Could it be
> related to the version of browser they are running?  I've asked them to
> upgrade to IE 6.0 (they are running 5.5 right now).
>
> ANY HELP AT ALL would be greatly appreciated.  I've determined WHAT is
> happening to a large degree, just not WHY!!!
>
> Thanks,
> Keith D Sellars
> WebGraffix
> www.webgraffix.com
>
> "Making database sites seem easy"
>
>
>
>
>
>
>

HWG: hwg-languages mailing list archives, maintained by Webmasters @ IWA