HTTP to HTTP session array cURL HELP!

[mrsocks]

hello,

i have been reading and testing but not sure if i am getting any closer.

i would like to be able to send session information from one domain www.clientdomain.com to a secure section of their account. the www.clientdomain.com wants to send session info to https://same.server.com/~clientdomain.com . the clientdomain.com is an account on same.server.com . when i try to post data to the checkout page on the the https:/same.server.com/~clientdomain.com from www.clientdomain.com my session array MYCART is empty (and doesnt even show as a set variable)

i think i ma suppsoed to be making a connection to curl, sending the data as feilds and then posting the info but i cannot get any success in doing this. i have tried a few test scripts and nothing seems to work. i am very new to this.

i am running, php 4.2.2 , apache 1.37, cURL libcurl 7.9.2 (OpenSSL 0.9.6b).

if there is any further info needed, please let meknow. any insight would be great.

thanks

[Weedpacket]

I don't have a solution off-hand (and an off-hand solution probably wouldn't be a good one), but I can tell you why your cart's ending up empty when you go to the secure server....

When your browser makes a request to your site, it sticks the session ID in among the request headers. But it only does this if the domain the request is being sent to is the same as the one it got the session ID from. It wouldn't do for it to go sticking all of its cookie data in every request it makes to every site on the planet!

But www.clientdomain.com and same.server.com are different domains.

Are you saying that these two domains are running on the same server, with the same installation of PHP handling both? You may have an out, then. Whichever URL you use to go from www.clientdomain.com to same.server.com, tack a bit of querystring on the end: "https://same.server.com/~clientdomain.com/blahblah.php?<?php echo SID?>"

That will stick the session ID into the URL, and PHP can retrieve it from there (when it finds that it's missing from the headers.)

Warning: That's entirely off-hand!

[mrsocks]

yes, they are both on the same server. i have an SSL installed for the server. the server name is http://server.servername.com and the SSL is for https://orders.servername.com.

that is the main account for the server and all accounts can be accessed from http;//server.servername.com/~account AND https://orders.servername.com/~account

all accounts are running the same versions of php.

i have tried the SID at the end of the URL but i that isnt working. it was for a few weeks (unreliably though) and now it now longer works at all. ui havent made any changes to teh config of php, or anything, so the inconsistencies are the most frustrating.

supposedly i need to use cURL but i am unable to get this to work.

any other ideas?

thanks

[Weedpacket]

Urk, it's those "sometimes happen" errors that are the most irritating ("...And whenver I do this it breaks and ... oh, fine then."); not the sort of thing I at least am willing to tackle without physically sitting down and swearing at the machine itself 🙂 so I'll have to defer to someone who's already had to deal with this situation.

The one desperate guess I can come up with deals with the cURL approach. If your problem was that it couldn't communicate with an SSL server, then it may be an older version; check that, compare it with the current version, see if that cryptographic library it needs is installed. (If this is a hosted server they shouldn't be too reluctant about doing the install; after all, they offer SSL hosting in the first place.)

If that suggests something to you, great. If cURL is already up to spec and everything's there, then - well, it was an idea.

[mrsocks]

after all the curl reading and testing, i am thinking that the curl function is for a more advanced requirement (sending to antoher https on another server)

here is what i have:

there is a file name:
sess_9994d43113856a411bf8fc507?

with the contents of:
userid|s:32:"0b25234b2408fc43da6e386d5280866a";mycart|a:2:{i:0;a:3:{i:0;s:2:"17";i:1;i:2;i:2;s:8:"wetrwetr";}i:1;a:3:{i:0;s:2:"18";i:1;s:1:"1";i:2;s:8:"erwtterw";}}
in the tmp dir. shouldnt i be able to access that files contents?

i am a bit confused as to how i would do this. i am probably thinking something much more complicated than i need. i need to read the mycart array from the file.

any help would be great.

[Weedpacket]

Thing is, that's exactly what session_start() is supposed to do, given the session ID: read the file with the same name as the value of the ID, and make an array out of it....

So long as you can get the session ID to the https-domain script somehow (manually inserting it in the URL ... hidden form field?) the /tmp session file has the same name as the ID. The file contents use the same syntax as the serialize()/unserialize() functions, so you should be able to use them to make sense of the session file's contents. (Read the file, call session_start() to start a session in the https domain, then go $_SESSION = unserialize(file contents), poss.).

In other words; emulate session_start() manually.

[mrsocks]

"Thing is, that's exactly what session_start() is supposed to do,"

that is what i thought but then why isnt it working? 🙁

i can pass the session ID to the https://orders.server.com/~domain.com address but, i must be lost as to how to "emulate session_start() manually" . throughout the http: prortion of the site, the cart is read by calling $mycart = $_SESSION['mycart']; and then i could pass $mycart to the function to read out the array contents and create the corresponding records.

if you can help me through this, i will send you scoobie snaks... 😉

thanks for the quick responses!

[Weedpacket]

Originally posted by mrsocks
i can pass the session ID to the https://orders.server.com/~domain.com address but, i must be lost as to how to "emulate session_start() manually" .

Sorry, that was in reference to the parenthsised bit in the previous paragraph:

1. Read the session file (named after the ID passed from the http domain)

2. call session_start() to start a session in the https domain

3. $_SESSION = unserialize(stuff from step 1);

This will create a new session in the https domain that is a duplicate of the one in the http domain.

I'm not wild about this, myself; there may be a config setting that prevents PHP from using URL-embedded sessids (actually, I'm 75% sure there is, but I don't remember what it's called). If that were set, then URL-embedding the sessid wouldn't work within a domain either. If you can't URL-embed the session, and since cookies don't work across domains, then session_start() wouldn't work at all, because those are the only places where it looks.

So you'd need to start a new duplicate session on the other domain; hence the three-step process above.

[mrsocks]

here is the code from the page before the https: chekcout page:

href=\"$s_homeurl/ckout.php?sess_id=".$COOKIE["PHPSESSID"]."&test=test\">CheckOut</a></B>\n";
print $SESSION['userid'];
print $_SESSION['mycart'];

	print "<BR>
		<form method=\"post\" action=\"$s_homeurl/ckout.php\" name=\"addtocart\">
		<input type=\"hidden\" name=\"sess_id\" value=\"".$_COOKIE["PHPSESSID"]."\">
		<input type=\"image\" border=\"0\" name=\"submit\" src=\"images/button_06.gif\" width=\"98\" height=\"27\" alt=\"Add to Cart\">
		</form>";

////I have both forms Get link and Post form with an if statement on the checckout page. (just for testing)

and here is the code from the https: checkout page.

$please = session_id($_GET['sess_id']); //where this is the ID of

session_start();

if ($test == "test")
{
$SESSION = unserialize($please);
} else {
$SESSION = unserialize($please);
}

############################
$mycart = $please['mycart'];

• now if i use the $mycart = $_SESSION['mycart'];..... i get an error:

Warning: Variable passed to reset() is not an array or object in /home/lpgcreat/public_html/st_library.php on line 615

BUT,
- if i use $mycart = $please['mycart']; ... iget an error
Warning: Variable passed to reset() is not an array or object in /home/lpgcreat/public_html/st_library.php on line 615

Warning: Variable passed to each() is not an array or object in /home/lpgcreat/public_html/st_library.php on line 625

sure there are now two errors, but at least the tabel draws in the function draws out this time (unlike when i use the $SESSION["mycart"]😉

i am not really sure now if i am getting closer. my email address is maxarbos ATATATAT yahoo DOTDOTDOT com . if you email me, i will send you the links to the site and you can see what it is doing.

THANK YOU!

[Weedpacket]

Try just

$please = $_GET['sess_id'];

Since your session ID isn't being recognised as such, you're having to treat it as just another form field.

Now that you've got it, you'll actually be wanting to use fread() or file() to get the data out of the /tmp directory; since the session functions aren't doing it.

Don't recall the exact syntax right now...
(Obviously you want to make sure $please really looks like a session id! A regexp to check the format would be in order)

$fp =fopen("/tmp".$please,'rb');
$sess_data = fread($fp,filesize("/tmp".$please));
session_start();
if($sess_data!==false)
$_SESSION = unserialize($sess_data);

As well as checking the safety of $please, you might need to fiddle with it so that it matches the filename you're after.

[mrsocks]

ok,
i have gotten the fopen and fread to work (at least i think so. i am nto getting anymore errors), but i am still gettting the errors

It is drawing the table from that function so there seems to be a value for both variables.

this is what i am using now at the top of the checkut page to be on the https:

$please = "sess".$GET['sess_id'];
$fp = fopen("/tmp/$please",'rb');
$sess_data = fread($fp,filesize("/tmp/$please"));
session_start();
if($sess_data!==false)
$_SESSION = unserialize($sess_data);

############################
$mycart = $please['mycart'];

when it goes to read the array $mycart (get the same errors if i use $mycart = $sess_data['mycart']; ), i am getting errors:

Warning: Variable passed to reset() is not an array or object in /home/lpgcreat/public_html/st_library.php on line 615

Warning: Variable passed to each() is not an array or object in /home/lpgcreat/public_html/st_library.php on line 625

if i change the $mycart = $please['mycart']; to $mycart = $_SESSION['mycart']; ( just to make sure i am reading it right)
i get the error:
Warning: Variable passed to reset() is not an array or object in /home/lpgcreat/public_html/st_library.php on line 615

and it doesnt draw the tabel from the function.

let me play with this a bit further . i dont want to keep buggin you with it. (unless you see something i am doing wrong)
thank you for all your help. when i am ready to jump out the window, i will email you.

thanks

[Weedpacket]

You may be getting confused about which variable contains what:

$please contains the filename in which the session data is stored
$sess_data contains the contents of the session file.

Now if I read [man]unserialize[/man] rightly,
$array = unserialize($sess_data); should be an array containing the variables and values (the manual is vague on this point, in that it doesn't actually describe the format used).

var_dump($array) to see what it says. If it looks right then replace $array with $_SESSION.

I'm actually hoping that the session data really is serialize() the same way (the examples never deal with "varname|contents"). If not, then some heavier parsing will be needed.

[mrsocks]

getting closer....

ok,
i am using

$please = "sess".$GET['sess_id'];
$fp = fopen("/tmp/$please",'rb');
$sess_data = fread($fp,filesize("/tmp/$please"));
session_start();
if($sess_data!==false)
$array = unserialize($sess_data);
///////////
$mycart = $sess_data['mycart'];

var_dump($array);
var_dump($sess_data); //just figured i would see what this looked like.
echo "here:".$mycart;

############################

the result i am getting is:
bool(false) string(114) "userid|s:32:"79bf558e8c23baa484dd2592782ff12b";mycart|a:1:{i:0;a:3:{i:0;s:2:"17";i:1;s:1:"1";i:2;s:8:"wetrwetr";}}" here:u

and errors of:

Warning: Variable passed to reset() is not an array or object in /home/lpgcreat/public_html/st_library.php on line 615
Description: Qty: (Adjust) Unit: Cost:

Warning: Variable passed to each() is not an array or object in /home/lpgcreat/public_html/st_library.php on line 62

if i replace the
$mycart = $sess_data['mycart']; with $mycart = $array['mycart']; errors are:
Warning: Variable passed to reset() is not an array or object in /home/lpgcreat/public_html/st_library.php on line 615

i know i am close.....

[mrsocks]

i can use:
$pieces = explode(";",$sess_data);
$num = count($pieces);

	$new = "$pieces[1]";
	for ($i = 2; $i < $num; $i++)
	{
		$new = $new.";".$pieces[$i];			
	}

$mycart = $new;
///////////
to get the mycart array from the session file. it looks like:
mycart|a:1:{i:0;a:3:{i:0;s:2:"17";i:1;s:1:"1";i:2;s:8:"wetrwetr";}}

i try to pass this info the the function that and i am gettign an error...
Warning: Variable passed to reset() is not an array (same two as before.)

why can the http pages read this info correclty and then the https section has an issue with it? (is this in the session_start function) i see that i should use unserialize, but should i serialize it? the unserialize function says that it brings the var back to a php value that i can use

[mrsocks]

Thank you for your help but as much as i hate to say it, the machine has won this round...

i have given up and just put all the shopping info on the https. works like a charm and i wont have to worry about it.

thanks again for your help.
when i get the time, i will read about it and see what i can come up with, but this time i was beaten...

oh well.

i hate to just give up like this but i have to know when to call it quits for now.

i cant tank you enough for all your hepl anyway.

take care and thanks.