Hank,

Is there a way for ME to test, with the php script itself, whether or not
they can  accept cookies and echo a "yes" or "no" back to the screen to
inform me of such?

Thanks,
Keith D Sellars
WebGraffix
www.webgraffix.com

"Making database sites seem easy"

----- Original Message -----
From: "Hank Marquardt" <hmarq(at)yerpso.net>
To: "Keith Sellars" <Keith(at)webgraffix.com>
Cc: <hwg-languages(at)hwg.org>
Sent: Monday, September 16, 2002 11:44 AM
Subject: Re: Session ID


> Looks more like they are blocking cookies either specifically for this
> site, or globally -- That means you'll probably either need to put the
> 'cookies required' language on the home page, or handle propogation and
> testing for the session id yourself -- trans-sid will do the work of
> sending the session id, but you'll need to do the testing for
> $_GET/$_POST['PHPSESSID'] yourself and then use the session_id() to set
> it yourself to prevent assignment of a new session on each page.
>
> I've seen this problem materialize on a lot of sites lately with the
> shift register_globals = off -- the reason is that trans-sid by itself
> used to be sufficient because $PHPSESSID would be registered in the
> global namespace regardless with register_globals=on -- so the
> session_start() call would find it even if it came in with GET/POST, now
> with the default off, you have to explicitly do a little
> testing/assignment from the $_GET/$_POST arrays for it to work ...
>
> But at the root, it occurs because the client is likely rejecting the
> initial cookie --
>
>
> On Mon, Sep 16, 2002 at 11:20:00AM -0400, Keith Sellars wrote:
> > Hi guys,
> >
> > I have a question for you.  It seems as if one of the schools that are
using
> > www.SchoolPad.net (a site we designed last year and are updating now) is
> > experiencing a situation that, for some reason, is NOT assigning them a
> > PHPSESSIONID.  Since the webadmin/index.php script checks for the
existence
> > of a PHPSESSIONID and gives them an "error" page otherwise, this is a
> > problem.  Since this is a security check, I really would like to keep
this
> > feature in place (Or as an option replace it with something equally
> > effective, although I really don't want to go that route because I want
it
> > to be server side, not client side).
> >
> > I am verifying this, but it seems as if this is the only school that is
> > experiencing this, and it does not matter which computer on their
network is
> > being used, which leads me to believe that it is an issue with network
> > security settings.  Is there anything that anyone is aware of that could
be
> > causing this?
> >
> > Thanks,
> > Keith D Sellars
> > WebGraffix
> > www.webgraffix.com
> >
> > "Making database sites seem easy"
> >
>
> --
> Hank Marquardt <hank(at)yerpso.net>
> http://web.yerpso.net
> GPG Id: 2BB5E60C
> Fingerprint: D807 61BC FD18 370A AC1D  3EDF 2BF9 8A2D 2BB5 E60C
> *** Web Development: PHP, MySQL/PgSQL - Network Admin: Debian/FreeBSD
> *** PHP Instructor - Intnl. Webmasters Assn./HTML Writers Guild
> *** Beginning PHP && PHP II -- Starting March 25, 2002
> *** See /services/classes
>

HWG: hwg-languages mailing list archives, maintained by Webmasters @ IWA