doubt about SESSION

kante

In my login system I use
simple login based on session var
or permanent login based on cookies.

The part based on cookies works fine, but the one using session no.

The system grant and register correctly the session var , but when the
user click on other website sections (e.g. goes to http://www.mysite.com/section)
the whole $_SESSION array is empty... so the user isn't recognized...

I have session.autostart set on.

maybe the $_SESSION['myvar'] = $myVal; depends also on the path?
just like cookies?

I've been using session many times without problems in this site too, but never had this issue about changing website subdirectories ...

thanks...

jorgepinho

Hi, is there any change you are restarting the session somewhere ?

bradgrafelman

What are the 'session.cookie_path' and 'session.cookie_domain' PHP directives set to?

kante

session.cookie_domain no value
session.cookie_path /

i guess they are fine....

@jeorgepinho: you mean to say if i session_start() again it will reset the $_SESSION array?

bradgrafelman

kante wrote:
session.cookie_domain no value
session.cookie_path /

i guess they are fine....

Well that depends; do you ever go from "mysite.com" to "www.mysite.com" ? If so, those are two different subdomains which means the default settings (as you have above) will prevent sessions created on one domain from being used on the other.

kante wrote:
@jeorgepinho: you mean to say if i session_start() again it will reset the $_SESSION array?

No; [man]session_start/man is required to begin the session if you aren't using the session.auto_start directive.

I believe he was instead asking if there was any code that might be re-initializing the session array.

Also, another thing to check; try outputting the session ID (see [man]session_id/man) on every page. Watch that value from the page where the session data is present as well as on a page where the data seems to reset; does the session ID ever change (hint: it shouldn't)?

jorgepinho

Yes, that is what I mean 🙂

I just spend hours until I found a $_SESSION = array() hidden somewhere 😕

Although the point on "session.cookie_domain" is a must check, if it is empty, it depends on how PHP is setting cookies.

Another thing: does this happen in diferent browsers ? IE, FF, etc...

kante

"do you ever go from "mysite.com" to "www.mysite.com" ? "

no i don't, i don't have absolute links [url]http://.[/url]..
so if i start navigating in www.mysite.com i stay in www.mysite.com

i'm not re-initializing the session array.

session.autostart is On

i tryed also to prnt out the session_id() on pages... it always returns the same value
but after some clicks all session data are reset...but the session_id is always there and have same value

i performed an extended search on $_SESSION in my scripts and there's not any intentional session array reset....

the problem happens on different browsers IE, FFox and webkit...

and it happens on two different servers... the DEv server and the online server

maybe the problem is due to the RewriteRule i have set in .htaccess file?

for the main menu i have some rules like this
RewriteRule ^{section/{0,1}$} /mypath/site/section.php
and also others for permalinks....

but still not sure about this coz I didn't understand when it exactly happens that session array is reset...😕

kante

I 've just noticed that when i Login clicking on the remember checkbox...
so my script not only register the SESSION login data but also a cookie login...

in this condition the SESSION works correctly it is never reset....

but still have no idea why is that...😕

kante

up .... no more ideas?
thanks...