OK, next question on this thread.  Since the cookies ARE being set and read,
at least by doing a setcookie ("temp_cookie", "Hello_Margaret") command, is
there anything that could prevent session_register() from setting a cookie
when the above way works?

Also, I've noticed that our script contains:
session_start();
session_register():

Since session_register will start a session, I don't believe that
session_start() is necessary.  Could this somehow work on most networks, but
not on others?

It just seems like, from everything I've been able to see thus far, that
they are NOT setting the cookie properly.  If I disable my cookies in my
browser, I experience the same thing that they are seeing.

Thanks,
Keith D Sellars
WebGraffix
www.webgraffix.com

"Making database sites seem easy"


----- Original Message -----
From: "Hank Marquardt" <hmarq(at)yerpso.net>
To: "Keith Sellars" <Keith(at)webgraffix.com>
Cc: <hwg-languages(at)hwg.org>
Sent: Monday, September 16, 2002 1:09 PM
Subject: Re: Session ID


> Not really ... but you can duplicate their problems and work on the
> solution by turning off your cookies (or blocking them from the site)
> ... after all it's going to be browser specific (I don't think I've seen
> a firewall/proxy filter specific cookies -- but I guess it could be if
> it's *all* browsers on all machines at the location)
>
>
>
> On Mon, Sep 16, 2002 at 12:33:54PM -0400, Keith Sellars wrote:
> > Hank,
> >
> > Is there a way for ME to test, with the php script itself, whether or
not
> > they can  accept cookies and echo a "yes" or "no" back to the screen to
> > inform me of such?
> >
> > Thanks,
> > Keith D Sellars
> > WebGraffix
> > www.webgraffix.com
> >
> > "Making database sites seem easy"
> >
> > ----- Original Message -----
> > From: "Hank Marquardt" <hmarq(at)yerpso.net>
> > To: "Keith Sellars" <Keith(at)webgraffix.com>
> > Cc: <hwg-languages(at)hwg.org>
> > Sent: Monday, September 16, 2002 11:44 AM
> > Subject: Re: Session ID
> >
> >
> > > Looks more like they are blocking cookies either specifically for this
> > > site, or globally -- That means you'll probably either need to put the
> > > 'cookies required' language on the home page, or handle propogation
and
> > > testing for the session id yourself -- trans-sid will do the work of
> > > sending the session id, but you'll need to do the testing for
> > > $_GET/$_POST['PHPSESSID'] yourself and then use the session_id() to
set
> > > it yourself to prevent assignment of a new session on each page.
> > >
> > > I've seen this problem materialize on a lot of sites lately with the
> > > shift register_globals = off -- the reason is that trans-sid by itself
> > > used to be sufficient because $PHPSESSID would be registered in the
> > > global namespace regardless with register_globals=on -- so the
> > > session_start() call would find it even if it came in with GET/POST,
now
> > > with the default off, you have to explicitly do a little
> > > testing/assignment from the $_GET/$_POST arrays for it to work ...
> > >
> > > But at the root, it occurs because the client is likely rejecting the
> > > initial cookie --
> > >
> > >
> > > On Mon, Sep 16, 2002 at 11:20:00AM -0400, Keith Sellars wrote:
> > > > Hi guys,
> > > >
> > > > I have a question for you.  It seems as if one of the schools that
are
> > using
> > > > www.SchoolPad.net (a site we designed last year and are updating
now) is
> > > > experiencing a situation that, for some reason, is NOT assigning
them a
> > > > PHPSESSIONID.  Since the webadmin/index.php script checks for the
> > existence
> > > > of a PHPSESSIONID and gives them an "error" page otherwise, this is
a
> > > > problem.  Since this is a security check, I really would like to
keep
> > this
> > > > feature in place (Or as an option replace it with something equally
> > > > effective, although I really don't want to go that route because I
want
> > it
> > > > to be server side, not client side).
> > > >
> > > > I am verifying this, but it seems as if this is the only school that
is
> > > > experiencing this, and it does not matter which computer on their
> > network is
> > > > being used, which leads me to believe that it is an issue with
network
> > > > security settings.  Is there anything that anyone is aware of that
could
> > be
> > > > causing this?
> > > >
> > > > Thanks,
> > > > Keith D Sellars
> > > > WebGraffix
> > > > www.webgraffix.com
> > > >
> > > > "Making database sites seem easy"
> > > >
> > >
> > > --
> > > Hank Marquardt <hank(at)yerpso.net>
> > > http://web.yerpso.net
> > > GPG Id: 2BB5E60C
> > > Fingerprint: D807 61BC FD18 370A AC1D  3EDF 2BF9 8A2D 2BB5 E60C
> > > *** Web Development: PHP, MySQL/PgSQL - Network Admin: Debian/FreeBSD
> > > *** PHP Instructor - Intnl. Webmasters Assn./HTML Writers Guild
> > > *** Beginning PHP && PHP II -- Starting March 25, 2002
> > > *** See /services/classes
> > >
> >
>
> --
> Hank Marquardt <hank(at)yerpso.net>
> http://web.yerpso.net
> GPG Id: 2BB5E60C
> Fingerprint: D807 61BC FD18 370A AC1D  3EDF 2BF9 8A2D 2BB5 E60C
> *** Web Development: PHP, MySQL/PgSQL - Network Admin: Debian/FreeBSD
> *** PHP Instructor - Intnl. Webmasters Assn./HTML Writers Guild
> *** Beginning PHP && PHP II -- Starting March 25, 2002
> *** See /services/classes
>

HWG: hwg-languages mailing list archives, maintained by Webmasters @ IWA