[RESOLVED] Weird Session Value

jansky

to all

i created a form with Validation key the validation key is Auto generated by script
and the value stored in Session, now weird thing is that the value in my next page session is not same as the generated key?

any thoughts on this?

here is the simple code
generaterandom.php

  session_start();
 for ($x='a';$x<'z';$x++)
																  {
																$s[]= $x;
																  }
																    for ($x='A';$x<'Z';$x++)
																  {
																$s[]= $x;
																  }
																    for ($x=1;$x<9;$x++)
																  {
																$s[]= $x;
																  }

															$number = "";
															for ($i = 1; $i <= 5; $i++)
															{
															     $number .= $s[mt_rand(1,55)];
															}

															$_SESSION['test'] = $number;
															echo $number;
															?>

and my second page is

<?php
  session_start();
  echo $_SESSION['test'];
?>

the $_SESSION['test'] is not same as the generated value 

TIA

laserlight

You might want to format the code so that it is readable, e.g.,

session_start();
for ($x = 'a'; $x < 'z'; $x++)
{
    $s[] = $x;
}
for ($x = 'A'; $x < 'Z'; $x++)
{
    $s[] = $x;
}
for ($x = 1; $x < 9; $x++)
{
    $s[] = $x;
}

$number = "";
for ($i = 1; $i <= 5; $i++)
{
    $number .= $s[mt_rand(1,55)];
}

$_SESSION['test'] = $number;
echo $number;
?>

jansky wrote:
the $_SESSION['test'] is not same as the generated value

In what way does it differ?

EDIT:
By the way, those three consecutive loops can be simplified to:

$s = array_merge(range('a', 'y'), range('A', 'Y'), range(1, 8));

Is there any reason not to use 'z', 'Z', 0 and 9? I can see why you might not want to use 0 given that it can be confused with 'O', but 9 seems obviously distinguishable under any reasonable font. Plus, you should use mt_rand(0, count($s) - 1), possibly with count($s) - 1 moved out of the loop.

jansky

sorry bout the mess code

on second page when i display the generated value of first page they are different

<?php
  session_start();
  echo $_SESSION['test'];
?>

Eg: the generated unique key is "Aoe9a" and that stored to the session test
but when i display that in second page
echo $_SESSION['test']; the valud should be "Aoe9a" but its different

what seems to be the problem?

dagon

works for me, so there's something else going on, there could be some other code setting sessions, make sure you have error checking on, remove any other code in each file. check php.ini settings

jansky

im using php5 anyway

i also tested in server but problem same

but why is it when i did not use the random generated key
the second page output is okay
eg: $SESSION['test'] = $GET['s']; // first page

laserlight

I suggest that you test with this script:

<?php
session_start();
if (!isset($_SESSION['test']))
{
    $s = array_merge(range('a', 'y'), range('A', 'Y'), range(1, 8));

$number = '';
$max_index = count($s) - 1;
for ($i = 0; $i < 5; ++$i)
{
    $number .= $s[mt_rand(0, $max_index)];
}

$_SESSION['test'] = $number;
}
echo $_SESSION['test'];

jansky

Unfortunately

the random generated key is part of Registration page so everytime they miss / invalid field/ miss field the form it regenerate another random key
so its not possible to use if (!isset($_SESSION['test']))

laserlight;10915674 wrote:

I suggest that you test with this script:

<?php
session_start();
if (!isset($_SESSION['test']))
{
    $s = array_merge(range('a', 'y'), range('A', 'Y'), range(1, 8));

$number = '';
$max_index = count($s) - 1;
for ($i = 0; $i < 5; ++$i)
{
    $number .= $s[mt_rand(0, $max_index)];
}

$_SESSION['test'] = $number;
}
echo $_SESSION['test'];

laserlight

jansky wrote:
the random generated key is part of Registration page so everytime they miss / invalid field/ miss field the form it regenerate another random key
so its not possible to use if (!isset($_SESSION['test']))

That does not matter. I am asking you to test first and tell us what happens.

Besides, this test can easily be adapted to become actual code for your situation, so just saying that "its not possible" is a cop-out 😉

jansky

definitely that will work because i already test that before but since what im asking is why the output of session['test'] is different from page two? consider that page one just grab the value and stored it in session 'test'

laserlight;10915676 wrote:
That does not matter. I am asking you to test first and tell us what happens.

Besides, this test can easily be adapted to become actual code for your situation, so just saying that "its not possible" is a cop-out 😉

laserlight

jansky wrote:
definitely that will work because i already test that before but since what im asking is why the output of session['test'] is different from page two? consider that page one just grab the value and stored it in session 'test'

The problem is, with your given code (and my example as well), there is nothing to suggest that the value would be changed when you visit another page with your second code snippet.

To confirm: the value of $_SESSION['test'] on the second page is another 5 character pseudorandom string different from the one generated and printed on the first page?

jansky

laserlight;10915678 wrote:
To confirm: the value of $_SESSION['test'] on the second page is another 5 character pseudorandom string different from the one generated and printed on the first page?

Yes it does, not sure if it is php bugs or my settings , although I also uploaded in the server and do the same things

jansky

found it,
its not actually php bugs or php settings
the plug-ins that i have in my browser do the crazy bugs