PHP4 Session Problem

Anon

Hello,

I have the following code:

/ login.php /
session_start ();
session_register ('sesID');
$sesID = session_id ();
header ("Location: reguser.php");

and

/ reguser.php /
session_start ();
if ( !IsSet ($sesID) ) die("Session ID Not Set");

In reguser.php, the script dies when it does the upper check meaning my $sesID is not set.

Shouldn't this code work properly?

One other thing that i found out to be interesting that the cookie written by php is like this(the cookie's name is sess_8ebad4ceec93f5d9b2f8345a74b1effb):

!sesID|

I think that valus of the variable supposed to be written there.

All these means that I can't pass variables via session_register from page to page !!!

Please help.

(I am using PHP4.03pl1 on Win2k and IIS5)

Anon

Hi,

I'm using IIS4 and experienced that when I set a cookie and use "header ("location...");" that the cookie was somehow not set.

I didn't get any errors, it just wasn't set. The same goes for your little problem here. I'm not sure if this is Win32 related or not, however your problem is solved if you replace your header("location: reguser.php"); with this line:

echo "<head><meta http-equiv=\"Refresh\" content=\"0;url=./reguser.php\"></head>";

(I always surround this tag with the proper html and head tags, as Netscape 6 is bothered if you don't do it)

The fact that your server side cookie was empty is (I think) because it was not succesfully set.

Anyone out there know if this is a bug or feature? ;-)

Anyway, it should work with the meta refresh. Try adding this on the first (login) page:

$ses_test = "myname";
session_register("myname");

And see if you can display it on the next page, like:

<p>Hello <?= $ses_test ?>!!</p>

If that works, everything is fine. The server side cookie should not be empty then.

Anon

Before the head and after the /head tags in the example, add html tags, it seems this forum strips such tags

Anon

Hello again and thanks Martin,

I tired your code and it did not again registered variables.

I have tested the same script (with the refresh header meta tag) on a Linux machine and it worked just perfectly.

IIS and Windows (or PHP) cannot handle sessions.

Ok, someone out there knows how to correctly use sessions on IIS4-5 and WinNT4-5?

Anon

<grin> I'm using IIS4 myself on Wintendo NT ;-) And I'm using Win98 for testing at home.

So.. it MUST work!! ;-)

Try changing your session temp path:

(on top of your page use)
session_save_path("c:\temp");

or
session_save_path("c:\tmp");

Whatever you use. PLUS make sure you have access to write to this directory as your IUSR_*.

(or right-click on the directory in explorer and click properties->security->permissions)

Your PHP either can't locate your temp dir, or can't write to it. However, this should result in some error of some sort.

Of course, the definite solution is changing this property in your php.ini

Anon

Hi again Martin,

I have done that. PHP can write to its session_save_path as indicated in php.ini.

As I said, php creates and writes the server-side-cookie but it does not write the variables' values appending to them.

Any more suggestions? 🙂)

thanks again

Anon

Ehhmm... no! Not really ;-)

However, I guess you could check your php.ini a bit for values like:

register_globals (on in my .ini)
track_vars (on in my .ini)

Anyway, perhaps the sequence is of importance, eg:

$ses_var = "test";
session_register("ses_var");

Just a thought.. Other than that, I don't know, I used your code and it works on my end, I shouldn't focus on the cookie that is set too much, and look for the results you get on the next page if you use:

echo $ses_var

If that's empty, it's wrong. Other than the 2 settings mentioned, and the order in which you set and register your var... It really should work!!

Is your browser accepting session cookies? Hmm.. if it works on Unix with the same browser, that shouldn't be the problem..

Anon

I'm having a really messed up problem with sessions on Linux using php 4.0.3 p 1. I set up a bunch of session state in one php script that at the end of a function redirects to another php script. When the target php script executes it cannot find a session variable I declared and assigned a value to. ( i.e. is_session_registered ("foo") returns false) The weird thing is that if I do a redirect and exit immediately after discovering that the variable isn't registered I can dump the session file and see the variable there. However if I do an 'echo "bye";' just before the redirect & exit, then the session file gets cleaned out and is zero length. The same holds true when I try to access the global session variable. Anyone got a clue?

Anon

Just a long shot, but if you use session vars within a function, you need to declare them global, e.g.

function foo() {
global $ses_var_test, $ses_var;
[...]
}

Otherwise, $var is a new var within the function. By default it doesn't 'survive' outside the function, unless you make it global.

Anon

Nope that's not it. I already happen to know and use globals. I still don't know what the problem is. I stepped back and used 4.0.2 and that didn't work and then I stepped back to 4.0.0 which I was using originally. Still I don't know that it's working it is at the moment but I've seen it work on and off. I think it may be some cookie/session sync problem, I went and tickled the session and my cookies files in various ways and got it to work again and then later again had the same problem. I have started using php as a dso so maybe there's something there too. Perhaps sticking with php statically compiled in is better. I think in the not too distant future I'm going to have to manage the session myself.

Anon

Might your browser be caching? Tried the pragma no-cache?

header("Pragma: no-cache");

Saw this in another article (Jasonk):
http://www.phpbuilder.com/forum/read.php3?num=2&id=105526&thread=105522

Anon

Onur bey Merhaba

Sanirim sizde benim yasadgim turden bir problem yasadiniz.
Windows 2000 Server ve ISS5 uzerinde Php 4.06 ve MySql cailistiyorum.
Session problemi yasiyorum. Session bazen cailisiyor bazen calismiyor. Save path'imin permission'lari duzgun. Hatta oraya dosyalari yaziyor. Yani database alinan datalar Session larin icinde gozuyor ama gel gelelim bir baska sayfaya gecip yine session kontrolu yaptigimda degiskenlerin ici bosaliyor.
Nerede hata yapmis olabilirim. Cildirmak uzereyim... Yardimci olursaniz sevinirim.

Tesekkurler

A. Bahadir UGE

Not: Ayni session Acaphe server uzerinde cok guzel cailisiyor.

Anon

Merhaba,

Sorunun ustunden 1 sene gecti, o yuzden hatirlamakta biraz gucluk cektim ama cok iyi hatirladigim bir sey var ki, ben de cildirmistim 🙂

Soruna gercek bir cozum bulamadim, ama soyle ufak bir 'workaround' yaptim.

session degiskenlerini atadigim sayfada, atadigim degiskenleri sadece o sayfaya mahsus olarak, takip eden sayfaya, get ettirirsem (yani xxx.php?degisken=deger gibi), o zaman degiskenleri degerlerini session dosyasina yaziyor ve bir daha get ettirme geregi olmadan diger sayfalarda sorunsuz olarak kullaniyor.

Aciklama bira karisik ve turkcem de biraz bozuk 🙂 O yuzden bir kod ornegi vereyim:

ornek: login.php

session_start ();

session_register ("sesID");
session_register ("UID");

$UID = $username;
$sesID = session_id ();

echo "<head><meta http-equiv=\"Refresh\" content=\"0;url=./main.php?sesID=$sesID&UID=$UID\"></head>";

Burada $UID databaseden alinmis bir bilgi. sesID'de session id'si !!

Dikkat edersen $UID degiskenini ve degerini son satirdaki echo komutundaki yonlendirme URL'sinin sonuna ekliyorum.

Bu islemi sadece ve sadece $UID session degiskenini atadagim sayfada yapiyorum. Yani main.php'den baska birsayfaya giderken UID'i URL'nin sonuna eklemene gerek yok.

Eger bunu yapmamis olsaydim, session degerlerinin yazildigi dosyada UID degiskeni gozukecek ama degeri gozukmeyeckti.

Cok aptak bir sorun, umarim yardimci olmusundur. Olmadiysa tekrar bakalim 🙂

Anon

Ilginize tesekkur ediyorum. Ayrica Turkceniz gayet iyi 🙂)

Ben size yapmak istedigimi, su an yaptigimi (Cunku bu kod Apache server uzerinde cok iyi cailisiyor.) anlatayim.

Sadece kayitli kullanicilarin girecegi bir sayfam var. Aslanda bir suru sayfa. Kullanicilar bir veritabaninda kayitli. Ilk sayfada kullanici Username ve Password giriyor. Eger bu Username ve password database'de kayitli ise bir Session degiskenine "Evet" atiyor.
Her php sayfasinda bu Evet degiskeninin varligi kontrol ediliyor. Session kapatilmadigi surece sayfalari gezebiliyor kullanici. Fakat baska sayfalara gecince bu degisken bosaliyor. Giristeki kodun sayfasi bul.php
Kod ise soyle
<?include("../db/dbdatabase.php");?>
<?

mysql_select_db("deneme",$dbLink);
$Query = "SELECT * FROM epdata WHERE email = '$eposta'AND password ='$password'";

$dbResult = mysql_query($Query,$dbLink);
$rows = mysql_num_rows($dbResult);
$row = mysql_fetch_object($dbResult);

if ($rows)
{

session_start("epsatis");
global $USER;
$USER = array();
$USER["userid"] = $row->recno;
$USER["username"] = $row->email;
$USER["login"] = "evet"; <--- Asli degiskenim bu ....
session_register("USER");
header("Location: giris.php");
}

else
{
session_start("epsatis");
$USER = array();
$USER["userid"] = "";
$USER["login"] = "hayir";
header("Location: hata.htm");
}
?>

Diger sayfalarda ise kontrol.php 'yi calistiyorum.

<?
session_start("epsatis");
session_register("epsatis");

if ($USER["login"]!= "evet") <--- Degisken hep bos deger gozukuyor.
{
header("Location: hata.htm");
}
?>

Sayet benim goremedigim birseyi gorurseniz beni cok mutlu edeceksiniz.

Tesekkur ederim. 🙂)

A. Bahadir UGE Turkiye / Ankara

Anon

Tekrar merhaba,

Tabi kod dort dortluk. Ancak windows'ta calistirmak mecburiyetindeysen, giris.php sayfasina yonlendirme yaparken $user degiskenini giris.php?user=blabla gibi bir kereye mahsus get ettirmen lazim. Ama bu durumda array olarak kurdugun veri yapisini bozman lazim falan...

Yani en azindan ben boyle cozmustum.

Bir de header komutunda bazen session degiskenleri saglikli olarak kaydedilmiyor. Belki refresh meta tagini kullanirsan ise yarayabilir. Denemeye deger...

Basarilar ! 🙂