Forum Moderators: coopster

Message Too Old, No Replies

php adds hidden field with session id *sometimes*

creates problems with Firebird

         

ergophobe

3:10 am on Jan 30, 2004 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



**edit** Update follows in next post

Strange problem with sessions again.

I have a simple login page that works exactly as expected on my local machine.

On the shared server it has one of two problems

1. In IE6, Mozilla 1.4, Opera 6 it adds a hidden input field to the form with the name PHPSESSID and the session id for a value. No big problem except that it places it right after the <form> tag and therefore the page does not validate.

2. It does NOT add this field in Firebird so the page validates. Of course, it won't actually log me in...

I can think of some workarounds, but I'd rather know why it's doing it and what the best fix is.

On the local machine I have

session.use_trans_id Off

On the shared machine, it's on. However, both have

session.use_cookies On

so I would have thought it would not go around adding session ids when it could set a cookie.

Tom

[edited by: ergophobe at 3:21 am (utc) on Jan. 30, 2004]

ergophobe

3:20 am on Jan 30, 2004 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



I turned

session.use_trans_id off

on the other machine and deleted all cookies and it seems to work okay now, though Firebird still seems finicky (even though it is set to accept all cookies and does).

Tom

ergophobe

9:56 pm on Mar 4, 2004 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Actually, I take back what I previously said. Everything works fine in IE 6, Opera 5 and 6, Mozilla 1.4.

In Firefox, it is sometimes necessary to clear all cookies from the domain before it will permit login. Another person had the same problem using Netscape. Since the site doesn't work in NS4.x, I assume this user was on NS 6 or 7.

I had thought this was because the site admin "control panel" set a cookie that conflicted with the one php was using for the session id. However, the user who had the same problem, which was similarly fixed by clearing cookies from the domain, does not have access to the control panel, and therefore shouldn't have those cookies on her machine.

Any ideas?