New session on page refresh!?

Anon

I'm using PHP 4.1.2 on Win2000 server SP2.
The browser does not accept cookies it seems, instead it uses PHPSESSID in the URL.

The problem is I get a new session ID when I press F5 (page refresh) why??

Another problem I have is that in my javascript code I have a variable like this:
var html1 = "<a href=\"Javascript: showPopup2()\" class=\"news\">";

This becomes:
var html1 = "<a href="\?PHPSESSID=5a15a54731e652488273ec4bfc3ba0ea""Javascript: showPopup2()\" class=\"news\">";

Which of course gives me a javascript error!
How can I prevent this?

/Andreas

van__

The problem is I get a new session ID when I press F5 (page refresh) why??

Dunno, check how you call your sessions.
If the PHPSESSID (you may want to change the name) is set in the URL, then there really is no reason why it should be changing.

As far as this....

var html1 = "<a href=\"Javascript: showPopup2()\" class=\"news\">";

According to the constantly forgotten PHP Manual (hey... who needs a manual when you have forums?) PHP will rewrite all your relative links if you have trans-sid=enabled.

What do you do about this hideous feature that is rewritting all your hrefs?
Well, it doesn't rewrite absolute links or placeholders, so rewrite it like so...
var html1 = '<a href="#" onClick="Javascript: showPopup2()" class="news">';

...Note the '#'... you should always use that to keep your onClicks from causing the page to just around and with the javascript call safely out of the HREF field, you will no longer have PHP rewritting that link.

andrin

This was very interesting... I have never come across it myself but now I better watch out and keep my eyes open.

I think that this is a serious issue that the PHP-personal must deal with onto the next version. A link starting with "javascript:" (<a href="javascript:whatEver()">) should be treated special in any JavaScript aware browser. If PHP "breaks" this feature it´s pretty serious I think. And yes I know... You should never depend on JavaScript etc etc ;-) But it can save your users and you webserver a lot of time and performance.

Any one else came across this? Please mail me and tell me about it. If this is an issue for the people at php.net they must be informed as soon as possible.

Anon

So, now I've changed it to onclick="... instead and yes it works! Yes the people at PHP should be aware of this, it shouldn't be like this!

My second problem is still around, I get a new PHPSESSID each time I refresh my page, this is on a Win2000 client. How come I get a new session id? It should change only if I close my browser and open a new one.

/Andreas

andrin

I agree! I do not have any ideea what could be the problem. If it´s not anything in php.ini like "session.gc_maxlifetime", "session.cookie_lifetime" and/or "session.cache_expire". I have mine all set to the Master Value and it works...