[RESOLVED] converting session_register code to use $_SESSIONS; not working

[lisabee]

Hello,

I recently discovered that session_register is being deprecated and the advice is to use $SESSION variables instead. So, I have converted a website to remove the session_register variables and use $SESSION instead. A typical variable looks like:

$_SESSION['nav']

I am also trying to avoid passing the session id in the URL so search engines don't ignore the page(s). So I am using the following code at the top of every page:

if (!isset($_SESSION))
{ ini_set("url_rewriter.tags","");
session_start();
}

So, now when I run a test the $_SESSION variables are set in the first page but are lost by the second. I am also using a session_write_close() before the header() function that moves on to the next page.

What is going wrong? Why are the session variables not be stored? Should I use $GLOBALS instead of $_SESSION?

Any help would be appreciated.

[bretticus]

The following (no if statement) should do what you want.

ini_set("url_rewriter.tags","");
session_start();

That is, disable session ids from being generated in the links and turning sessions on for cookie enabled browsers for everyone else.

[lisabee]

Thanks for your help; unfortunately, it didn't make a difference. So, backing up, I completely removed the

ini_set("url_rewriter.tags","");

from the programs and went back to passing the session_id in the URL. So, here is the code where session variables are being set (and yes, there is a session_start() at the top of the program):

router.php....

	 } else	{
			  $_SESSION['nav'] = "category";
			  $_SESSION['category'] = "0";
			  $_SESSION['content'] = "featuredArtist.php"; 
			}

if ($content != ""){$_SESSION['content'] = $content; }



session_write_close();

header("Location: studio.php?".session_id());
exit;

When I tested the code I added a test before the session_write_close(); to print the $_SESSION['nav'] variable and it was set correctly. Then in the next program, studio.php, I added the same testing code right after the session_start() and BINGO, the variable was not set. The code for the beginning of studio.php is:

session_start();

print "Nav: ".$_SESSION['nav'];
exit;

According to all my research about sessions, the variables should be stored and accessible in every program that uses the session_start();.

Is there something I'm missing. Why am I losing session variables?

Thanks in advance for any help you can give me.

Lisa

[bretticus]

Just because you removed ini_set("url_rewriter.tags",""); doesn't mean session ids must be passed via URL only. Any browser with cookies enabled will pass them via cookie. The URLs are appended to only when PHP detects cookies are disabled. You probably already know this but your wording indicates otherwise.

Also, why are you using session_write_close()? Are you using frames? It's not really necessary based on the information in your post.

Why not just try.

header("Location: studio.php");
exit;

Also, are you certain that the if statement criteria is not true? In other words, are you even setting $_SESSION['nav'] in the true block of the statement the following statement that doesn't show the if statement?

} else	{
			  $_SESSION['nav'] = "category";
			  $_SESSION['category'] = "0";
			  $_SESSION['content'] = "featuredArtist.php"; 
			}

[lisabee]

Thanks for the info, bretticus, regarding the browser storing the session id in cookies. I had read something about that but the info I read wasn't real clear on it. Thanks for clearing that up for me.

I am using the session_write_close() because I had read somewhere it ensures the session variables are stored before the execution passes to another program. Obviously, it is not working in this case.

Yes, I am sure the $SESSION['nav'] is not being reset in the TRUE portion of the if statement. I set a test just before the session_write_close() and $SESSION['nav'] is set to 'category'. It's when the same test is done in the next program that the $_SESSION['nav'] is empty.

I will remove the code that passes the session_id in the URL....that's what I am after in the long run. I just can't figure out why the session variables are being lost between programs.

[bretticus]

Do not use session_write_close(). PHP already does this when the script is done running. Although using it shouldn't make any difference. All the same, no need to use it.

I have had issues where session variables coudl not be written for one reason or another. Just out of curiosity, what OS are you using? What version of PHP?

[lisabee]

I am actually on the phone line with the web host (Bizland...they are very helpful, by the way). Anyways, I looked at their error log for the account I am testing and found the session_save path is not being found for my account. So maybe the coding is fine but the phpini needs to be adjusted.

They did say can reference the session_save_path in my script. I assume there is a function I can use that will overwrite the phpini instructions. Would I use that at the top of all my scripts?

[bretticus]

lisabee wrote:

...account I am testing and found the session_save path is not being found for my account.

ah ha! Unless PHP is configured to store session information in memory (or someplace else other than the default), the error you describe will render sessions useless as PHP needs to write the session data somewhere

lisabee wrote:

They did say can reference the session_save_path in my script.

Yeah but PHP (running with webserver permissions I assume. which are often your user account.) cannot find it , hence, the error message.

lisabee wrote:

I assume there is a function I can use that will overwrite the phpini instructions. Would I use that at the top of all my scripts?

Yep, many methods. You can use ini_set() like you did for url_rewriter.tags. You can use the .htaccess file (if apache is configured to allow it. almost always allowed on hosting accounts.) or you can just use the session_save_path() function. I would create a directory in your home directory at the same level as your web directory (i.e. your session directory is not accessible via your website.) Also, the path must be a filesystem path. Since your server is most likely *nix, you might be able to use "/home/youraccount/sessions/" as the path.

[lisabee]

Thanks so much! I believe we have this problem solved. I appreciate all your help and quck replys.

Lisa

[bretticus]

Glad I could help. Please make sure you mark this thread RESOLVED.