Session duplicated in url

fredouille

I'm currently coding a script..jsut a small pb...I have that kink of url

toto.php?sid=sqdsds121212&sid=sqdsds121212 no tehcnical pb but not very clean..any idea ?

before starting any session I include a file which contains that :

ini_set("session.save_path",$diskpath."/logs");
ini_set("session.name","sid");
ini_set("session.use_cookies",0);
ini_set("session.cache_expire",20);
ini_set("session.use_trans_sid",0);
ini_set("session.auto_start",0);

to override the default php.ini value

save_path : to secure the session file (not to be readable from other sites)
use_cookies : to use only sesssion by url

thanks for your help

mattsinclair

if you are looking at the phpinfo() output, do you see '--enable-trans-sid ' in your ./configure path ?

php can automatically append the SID onto url's. if you do it manually on top of that, it will add twice

fredouille

thanks...

exact the isp has session_use.trans_sid= On even as I have ini_set("session.use_trans_sid",0);

any idea ?

mattsinclair

oops, I missed that.... heh.

maybe that line is not working?

could you post the code you use to generate the url?

fredouille

ini_set("session.use_trans_sid",0);
seems not to work, in php doc about ini_set for the value session.use_trans_sid it is written : PHP_INI_SYSTEM|PHP_INI_PERDIR..

the code is simple for the href links:

toto.php?<?php echo Session_name();?><?php echo Session_id;?> something like that

mattsinclair

well, first of all to see if it is working,

if (!ini_set("session.use_trans_sid",0)) { print "ERROR SETTING USE_TRANS<hr>"; }

the PHP_INI_USER|PHP_INI_PERDIR just means you, php.ini, .htaccess, or httpd.conf can set this variable. you are able to set it, so it should work.

maybe it's a syntatical error, try

if (!ini_set("session.use_trans_sid","0")) { print "ERROR SETTING USE_TRANS<hr>"; }

if (!ini_set("session.use_trans_sid",NULL)) { print "ERROR SETTING USE_TRANS<hr>"; }

mattsinclair

not sure if ini_get() would take the actual INI file value, or the value after you set it, but it's worth a shot

http://us3.php.net/manual/en/function.ini-get.php

Also, make sure every part of your URL create function actually outputs the values you want. Try to output a URL the same way you do, but don't use any of the extras to see if it's PHP that is appending or if it's something you wrote.

fredouille

Originally posted by mattsinclair
well, first of all to see if it is working,

if (!ini_set("session.use_trans_sid",0)) { print "ERROR SETTING USE_TRANS<hr>"; }

the PHP_INI_USER|PHP_INI_PERDIR just means you, php.ini, .htaccess, or httpd.conf can set this variable. you are able to set it, so it should work.

maybe it's a syntatical error, try

if (!ini_set("session.use_trans_sid","0")) { print "ERROR SETTING USE_TRANS<hr>"; }

or

if (!ini_set("session.use_trans_sid",NULL)) { print "ERROR SETTING USE_TRANS<hr>"; }

error on all tests..just use_trans_sid return an error...

mattsinclair

do you get an error on all of these?:

if (!ini_set("session.save_path",$diskpath."/logs")) { print "ERROR LINE: ".LINE; }
if (!ini_set("session.name","sid")) { print "ERROR LINE: ".LINE; }
if (!ini_set("session.use_cookies",0)) { print "ERROR LINE: ".LINE; }
if (!ini_set("session.cache_expire",20)) { print "ERROR LINE: ".LINE; }
if (!ini_set("session.use_trans_sid",0)) { print "ERROR LINE: ".LINE; }
if (!ini_set("session.auto_start",0)) { print "ERROR LINE: ".LINE; }

if so, then it's a problem with ini_set()

but, try to generate the url WITHOUT using anything else, i'm not sure how you generate the url, just remove any variables you append to the url. If it adds the PHPSESSID, then you know it is the use_trans_sid..

fredouille

yes all line works except one...it should be a pb with init_set...I don't want to remove the url a let php add them..because I disable cookies so if trans_sid is desabled sessionwon't work

mattsinclair

http://us4.php.net/manual/en/function.ini-set.php

in here, a user says he has problems with it as well. why don't you edit your php.ini to disable it?

and if you can't (you're not the sysadmin/don't want to) why don't you just leave it, and let PHP generate the sessid. Cookies don't matter, i don't think it uses cookies

fredouille

I can't it is for a product which will run on different servers...grrrr..

mattsinclair

well, if you would run the test to see if it acutally is use_trans_sid that is causing the problem, you would know whether it's a big deal or not.

your client's server may not use transparent sessid's, then it wouldn't be a problem.

it's not even a problem now, infact, it's best that you DO add it in always, and if the client complains, just say "I added this in so your program will always work. If it wasn't like this, and your sysadmin edited the php.ini file to stop transparent sessid's, your program would no longer work." <- they will be happy that you made sure their program will work under all circumstances. who cares if it looks pretty.

fredouille

well, if you would run the test to see if it acutally is use_trans_sid that is causing the problem, you would know whether it's a big deal or not.

I done the test..it is only use_trans_sid which cause a pb

mattsinclair

oh, i mean you should run a test to see if PHP is adding another sessionid because of use_trans_sid

if php is adding it, and not your code, you really shouldn't worry..because use_trans_sid is 0 by default, so chances are your client's server doesn't use it.

if your code is adding it, then i'd need to see the code which generates your url.

fredouille

yes..when modifing this option ini php.ini it works...

mattsinclair

ok, then it's the php ini....

chances are your client wont have it enabled, but if they do, i'm sure they will understand that the reason it shows twice is for optimum compatability.

if they want it out, then just remove the part of your code where it prints SID. It will always work, it will just print SID automatically.