PHP and IE6sp1 and Sessions

bytron_php

Hello there,

I decided to download IE6sp1. Since then our web site just does work properly. I have read all the information about IE6sp1 Cookies and I still can't get the site to work like it did before!

The problem resides in the way the sessions are handled. I have enable-trans-sid switched on but in some cases the SID is not posted to the next page. I have a apache webserver with a virtual directory, which is SSL and the normal apache htdocs root, without ssl. The code I am running is:

<?php
if ($var1 != 11)
{
if ($var2 == 10)
echo "HELLO";
?>
<html>
<body>
<a href='test1.php?var1=11'>click here</a>
</body>
</html>
<?php
}
else
{
if ($var1 == 11)
{
$var2 = 10;
session_register("var2");
?>

                    <html>
    	                <body>				
	<script language="javascript1.2">
                            document.location = "test1.php?var1=10";
	</script>

                    	</body>
            	</html>

<?php
}
}
?>

On the non ssl site the session id is passed on the document.location line. On the ssl site the session id is never passed. If I use an href to move between the pages it works on both sites.
This problem has only come about when using IE6sp1.
Has Microsoft ruined may page or an I doing something wrong?

Please help!!

Thanks Chris Mitchell

PyroX

You have to force IE6 to work code-side, place this in your pages:

<?
header('P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"');
session_start();
?>

This header enables your cookie to survive any privacy settings in the browser.

For more info, visit: http://www.microsoft.com/windows/ie/using/howto/privacy/config.asp

bytron_php

Thanks for your reply,

I already have the cookie thing sorted.
Its the javascript line that doesn't seem to work.

If I move on to the next page using:

<a href="test1.php?var1=10">click here</a>

it works fine. So to with (in the javscript code):

document.location = "test1.php?PHPSESSID=<?=$PHPSESSID?>";

I really don't understand what microsoft have done. All of this is server side.