Re: Session ID
by "Keith Sellars" <Keith(at)webgraffix.com>
|
| Date: |
Mon, 16 Sep 2002 13:21:44 -0400 |
| To: |
"DJ" <flouric(at)mac.com>, "Hank Marquardt" <hmarq(at)yerpso.net> |
| Cc: |
<hwg-languages(at)hwg.org> |
| References: |
S0026260871 mac yerpso |
| |
todo: View
Thread,
Original
|
|
Hank,
You are indeed correct. In this case, since it was only one school (one
network), I phone them and got them to look at the pages to verify that the
cookie was being set (it is).
Thanks,
Keith D Sellars
WebGraffix
www.webgraffix.com
"Making database sites seem easy"
----- Original Message -----
From: "Hank Marquardt" <hmarq(at)yerpso.net>
To: "DJ" <flouric(at)mac.com>
Cc: "Keith Sellars" <Keith(at)webgraffix.com>; <hwg-languages(at)hwg.org>
Sent: Monday, September 16, 2002 1:11 PM
Subject: Re: Session ID
> Perhaps I mis-read this, but I thought thought the question was for
> *him* at *his location* to remotely test for cookie usage --
>
> Both these methods work, but require reporting from a user on site with
> the browser or other feedback mechanism --
>
> On Mon, Sep 16, 2002 at 11:57:01AM -0700, DJ wrote:
> > Seems like you could set a cookie and then request it. if it comes
> > back they have cookies enabled. If not then they don't.
> >
> > On Monday, September 16, 2002, at 09:33 AM, Keith Sellars wrote:
> >
> > >Hank,
> > >
> > >Is there a way for ME to test, with the php script itself, whether or
> > >not
> > >they can accept cookies and echo a "yes" or "no" back to the screen to
> > >inform me of such?
> > >
> > >Thanks,
> > >Keith D Sellars
> > >WebGraffix
> > >www.webgraffix.com
> > >
> > >"Making database sites seem easy"
> > >
> > >----- Original Message -----
> > >From: "Hank Marquardt" <hmarq(at)yerpso.net>
> > >To: "Keith Sellars" <Keith(at)webgraffix.com>
> > >Cc: <hwg-languages(at)hwg.org>
> > >Sent: Monday, September 16, 2002 11:44 AM
> > >Subject: Re: Session ID
> > >
> > >
> > >>Looks more like they are blocking cookies either specifically for this
> > >>site, or globally -- That means you'll probably either need to put the
> > >>'cookies required' language on the home page, or handle propogation
> > >>and
> > >>testing for the session id yourself -- trans-sid will do the work of
> > >>sending the session id, but you'll need to do the testing for
> > >>$_GET/$_POST['PHPSESSID'] yourself and then use the session_id() to
> > >>set
> > >>it yourself to prevent assignment of a new session on each page.
> > >>
> > >>I've seen this problem materialize on a lot of sites lately with the
> > >>shift register_globals = off -- the reason is that trans-sid by itself
> > >>used to be sufficient because $PHPSESSID would be registered in the
> > >>global namespace regardless with register_globals=on -- so the
> > >>session_start() call would find it even if it came in with GET/POST,
> > >>now
> > >>with the default off, you have to explicitly do a little
> > >>testing/assignment from the $_GET/$_POST arrays for it to work ...
> > >>
> > >>But at the root, it occurs because the client is likely rejecting the
> > >>initial cookie --
> > >>
> > >>
> > >>On Mon, Sep 16, 2002 at 11:20:00AM -0400, Keith Sellars wrote:
> > >>>Hi guys,
> > >>>
> > >>>I have a question for you. It seems as if one of the schools that
> > >>>are
> > >using
> > >>>www.SchoolPad.net (a site we designed last year and are updating
> > >>>now) is
> > >>>experiencing a situation that, for some reason, is NOT assigning
> > >>>them a
> > >>>PHPSESSIONID. Since the webadmin/index.php script checks for the
> > >existence
> > >>>of a PHPSESSIONID and gives them an "error" page otherwise, this is a
> > >>>problem. Since this is a security check, I really would like to keep
> > >this
> > >>>feature in place (Or as an option replace it with something equally
> > >>>effective, although I really don't want to go that route because I
> > >>>want
> > >it
> > >>>to be server side, not client side).
> > >>>
> > >>>I am verifying this, but it seems as if this is the only school that
> > >>>is
> > >>>experiencing this, and it does not matter which computer on their
> > >network is
> > >>>being used, which leads me to believe that it is an issue with
> > >>>network
> > >>>security settings. Is there anything that anyone is aware of that
> > >>>could
> > >be
> > >>>causing this?
> > >>>
> > >>>Thanks,
> > >>>Keith D Sellars
> > >>>WebGraffix
> > >>>www.webgraffix.com
> > >>>
> > >>>"Making database sites seem easy"
> > >>>
> > >>
> > >>--
> > >>Hank Marquardt <hank(at)yerpso.net>
> > >>http://web.yerpso.net
> > >>GPG Id: 2BB5E60C
> > >>Fingerprint: D807 61BC FD18 370A AC1D 3EDF 2BF9 8A2D 2BB5 E60C
> > >>*** Web Development: PHP, MySQL/PgSQL - Network Admin: Debian/FreeBSD
> > >>*** PHP Instructor - Intnl. Webmasters Assn./HTML Writers Guild
> > >>*** Beginning PHP && PHP II -- Starting March 25, 2002
> > >>*** See /services/classes
> > >>
> > >
> >
>
> --
> Hank Marquardt <hank(at)yerpso.net>
> http://web.yerpso.net
> GPG Id: 2BB5E60C
> Fingerprint: D807 61BC FD18 370A AC1D 3EDF 2BF9 8A2D 2BB5 E60C
> *** Web Development: PHP, MySQL/PgSQL - Network Admin: Debian/FreeBSD
> *** PHP Instructor - Intnl. Webmasters Assn./HTML Writers Guild
> *** Beginning PHP && PHP II -- Starting March 25, 2002
> *** See /services/classes
>
HWG: hwg-languages mailing list archives,
maintained by Webmasters @ IWA
This page is part of a preserved archive of archives.hwg.org. The site is no longer active and its content is not maintained. For enquiries about this archive, write to archive(at)iwanet.org.