[Resolved] Session not staying the same

[guurk]

Here's the setup:
Apache 2 w/ mod_php
php.ini: session.save_path =/tmp
OS: win2000

index.php:

<?php
session_start();
echo SID
?>
<form action="two.php" method="post">
<input type="submit" name="submit" value="Submit"/>
</form>

two.php:

<?php
session_start();
echo SID
?>

The two SIDs are different.
The /tmp directory ends up with two files.

I have no idea what I'm doing wrong.

[guurk]

After reading some more around here I made the following change:

php.ini:

session.save_path =/tmp

to

session.save_path =c:\tmp

Result:

Exact same behavior.

[mrhappiness]

session.use_cookies ?
session.use_only_cookies ?
session.use_trans_sid ?

do you accept cookies?

[guurk]

Originally posted by mrhappiness
session.use_cookies ?
session.use_only_cookies ?
session.use_trans_sid ?

do you accept cookies?

session.use_cookies = 1
session.use_only_cookies = 1
session.use_trans_sid = 0

Yes, both browsers accept cookies. (I'm testing with IE 6 and NS 7.1)

[mrhappiness]

what are the cookie's details?

[guurk]

Originally posted by mrhappiness
what are the cookie's details?

Not sure what you are asking for.. right now I'm not putting anything in the cookie at all. All the files in c:\tmp are empty.

[guurk]

Ok, now I'm going crazy.

I just reinstalled apache 2 and cleaned off php and everything.

Now I'm not getting the cookies in the c:\tmp directory at all.... AAAAHHHHHH!

[mrhappiness]

well, we try it the other way round

make your browsers ask befoe accepting cookies and try calling the page once again

after hitting "Yes, I want that damned cookie" how me the html-source of the page index.php (menaing the very same the browser get's to display) and the complete sourcecode of index.php

of course you only do that in case it won't work

[guurk]

Originally posted by mrhappiness
well, we try it the other way round

make your browsers ask befoe accepting cookies and try calling the page once again

after hitting "Yes, I want that damned cookie" how me the html-source of the page index.php (menaing the very same the browser get's to display) and the complete sourcecode of index.php


of course you only do that in case it won't work

Ok, stupid mistake. I had a copy of the origional php.ini in the apache 2 directory. Now it's using my php.ini in the c:/winnt directory... same behavior as before...

Ok. So I brought up NS 7.1 and clicked the 'ask me before storing a cookie', cleared all cookies that had already been downloaded. And restarted the browser.

I know it works, it asked me to allow a cookie from google (my default home).

But when I went to my localhost/ it didn't ask.

(?? how do I make source look nice ??)

[mrhappiness]

i don't want no nice source i want the source the way it is

if netscape didn't ask maybe you should check the sites that are not allowed toset cookies. it's somewhere in netscape's options

[guurk]

I cleared all sites from the cookie settings.. Still no go on getting the notification to allow setting a cookie.

index.php:

PHPSESSID=94d1a0525690ec7318202cce2d6fa663
<form action="two.php" method="post">
<input type="submit" name="submit" value="Submit"/>
</form>

two.php:

PHPSESSID=db80c9854e29224536a4b68651ca8d39

[mrhappiness]

how do you output the session id?

do you

echo SID;

?
in case you do: you don't use sessions and the information you gave me about use_cookies and use_only_cookies is wrong

do

phpinfo();

and copy&paste the part dealing with sessions

[guurk]

HTTP Response Headers
X-Powered-By PHP/4.3.4
Set-Cookie PHPSESSID=ce0e090a4141b7f480d571dd9d2e20c3; path=/; domain=sessions.resonus.net
Expires Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma no-cache
Transfer-Encoding chunked
Content-Type text/html; charset=UTF-8

session
Session Support enabled
Registered save handlers files user

Directive Local Value Master Value
session.auto_start Off Off
session.bug_compat_42 Off Off
session.bug_compat_warn On On
session.cache_expire 180 180
session.cache_limiter nocache nocache
session.cookie_domain sessions.resonus.net sessions.resonus.net
session.cookie_lifetime 0 0
session.cookie_path / /
session.cookie_secure Off Off
session.entropy_file no value no value
session.entropy_length 0 0
session.gc_divisor 1000 1000
session.gc_maxlifetime 1440 1440
session.gc_probability 1 1
session.name PHPSESSID PHPSESSID
session.referer_check no value no value
session.save_handler files files
session.save_path C:\tmp C:\tmp
session.serialize_handler php php
session.use_cookies On On
session.use_only_cookies On On
session.use_trans_sid Off Off

[mrhappiness]

which date and time you have aon your comp?

Thu, 19 Nov 1981 is past
if you provide an exppiration date/time that is in past no cookie will be set but deleted

[guurk]

April 9, 2004 12:05... no 12:06... no... 🙂

[guurk]

could this setting have an effect?

session.cookie_lifetime = 0

[guurk]

Notice that there are two expires... on in the set cookie and the one you are talking about in the headder expires.

[guurk]

Which only shows up if I set that value to something other than 0... I set it to 3600 and I get this:

HTTP Response Headers
X-Powered-By PHP/4.3.4
Set-Cookie PHPSESSID=ca62c583f711ebf8f8e862b7bd5a5f9c; expires=Fri, 09-Apr-2004 19:09:32 GMT; path=/; domain=sessions.resonus.net
Expires Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma no-cache
Transfer-Encoding chunked
Content-Type text/html; charset=UTF-8

[mrhappiness]

i'm sorry, thought something real stupid...

if you set an expiration date for your cookie, does it work?

[guurk]

Nope... it just changes what the phpinfo reports in the set-cookie clause.