php sessions vs ie9

[sophistikat]

i am running of time and options so i'll make this quick and simply.

i am working on an application where on the homepage, upon first load and any subsequent refresh, i want a new session id. the framework is CodeIgniter and after many different solutions found on the web, we still have come up empty.

In IE9 - the session_id() returns a new id on every page load; I only want it to happen on the index page as this id will be used to save the end-users data.

We've tried using CI's internal session implementation and PHP's native session but IE9 keeps updating the session_id().

What is up with IE9? I can't find the right solution.

[bpat1434]

A new session ID will always be generated unless there is a session ID present in the $GET, $POST or $_COOKIE super global arrays. So that says that either (a) the IE browser you're using isn't set up to accept cookies or (b) you have code that specifically starts a new session with a new ID parameter.

One way around this is to pass the session ID around in the URL. This should only be used if they don't have cookies enabled (which can be detected) as it is insecure (session hijacking).

Another option is to write your own session handler and when session_start() is called, you can do your own thing to either (a) instantiate a new session or (b) respond with an already set up session.

[sneakyimp]

Unless I'm missing something you said you want a new session id on any subsequent refresh on the home page. If index.php is forcing a new session id on each refresh, then that could be your problem.