Small problem with sessions

jackdan

Hi, I am having a small problem with sessions.

On the first page of a web site, I give people the choice between the french and english page. Now since I want to log the http_referer and carry it through the web page, I start a session, and save the $_SERVER['http_referer'] into a session variable. This code is at the very beginning of my first page:

<?php
session_start();
$SESSION['CLIENT_HTTP_REFERER']=$SERVER['HTTP_REFERER'];

?>

Now the problem I am having with this, is that on the first view of this page, the session id gets added (in a 'get' style) into the links to my french/english pages. Here's an example of the href url:

http://www.YYYYYYYYY.net/fr/?PHPSESSID=ac92dc1300c2d59fb79167dfd1f527ef

Now, since I link into a frameset type page, the ?PHPSESSIONID stays there for the entire view of the web page, which looks very goofy.

How the hell does this happen, and how can I prevent this from happening? (My browser is mozilla 1.7.2 with the option ACCEPT ALL COOKIES, so I don't understand why it can't pass the session_id as a cookie).

Thanks in advance,

gufmn

Can you use POST instead of GET? Is this part of a form?

And Session != Cookie. You can store a session id in a cookie but just starting a session doesn't create a cookie.

jackdan

POST or GET is not the problem...there is no form in my web page... Here is the entire web page:

===========================
<?php
session_start();
$SESSION['CLIENT_HTTP_REFERER']=$SERVER['HTTP_REFERER'];
?>

<html>
<head>
</head>
<body>
<table align="center" border="0" cellspacing="5">
<tr>
<td>
<a href="./fr/">Français</a>
</td>
<td>
<a href="./en/">Anglais</a>
</td>
</tr>
</table>
</body>
</html>

=======================

And for some reason both of my <a href> get '?PHPSESSIONID=432H4J32K4H32JK..." added to them... (but only the first time viewing the page)

Any idea?

yelvington

Change the value of session.use_trans_sid in php.ini or with ini_set().

http://www.php.net/manual/en/ref.session.php#ini.session.use-trans-si

jackdan

Thanks for the tip. I have been trying to change it via ini_set(). Unfortunately, I had no success. ini_set() always returns 'false' (as you most probably know that means it failed).

I tried putting my ini_set() command before/after my session_start() statement. I took out the session_start() statement. I tried double-quotes, singles quotes.

I checked php.net. session.use_trans_id is changeable from PHP_INI_ALL, so I should be able to change it. Could my ISP be stopping me from changing this setting?

Here is what I tried:
$result = ini_set('session.use_trans_sid','0');

tsinka

Hi,

if your ISP runs apache you can try to disable this feature with a .htaccess file in your DOCUMENT_ROOT containing

php_flag session.use_trans_sid off

Thomas