Could you turn on dbgSession and see what session related entries appear in
the embperl.log?

Gerald


---------------------------------------------------------------------------
Besuchen Sie uns auf der Systems 2005 in München, Halle B2, Stand 704
---------------------------------------------------------------------------
Gerald Richter            ecos electronic communication services gmbh
IT-Securitylösungen * Webapplikationen mit Apache/Perl/mod_perl/Embperl

Post:       Tulpenstrasse 5          D-55276 Dienheim b. Mainz
E-Mail:     [EMAIL PROTECTED]          Voice:   +49 6133 939-122
WWW:        http://www.ecos.de/      Fax:     +49 6133 939-333
---------------------------------------------------------------------------
ECOS BB-5000 Firewall- und IT-Security Appliance: www.bb-5000.info
---------------------------------------------------------------------------

  

> -----Original Message-----
> From: ___cliff rayman___ [mailto:[EMAIL PROTECTED] 
> Sent: Wednesday, September 14, 2005 6:56 AM
> To: embperl@perl.apache.org
> Subject: Session Problems Due to Apache Calling Back Into Itself
> 
> It seems that when a REDIRECT is requested, apache/mod_perl 
> chooses to call back into itself, or resuse the same 
> connection. In any case, when certain redirects occur, the 
> session is not written and the next connection to use the 
> process now has the same session id and session data. It is 
> not yet clear if this only happens when a new user comes 
> without a SET-COOKIE in the header, or if the SET-COOKIE is 
> being ignored.
> 
> When we have a user in the page: 
> https://www.xulucorp.com/company/cartartwork.html
> and we redirect back to the same page (not sure this is a 
> good idea in any case), the new user gets the existing session.
> 
> We are redirecting as follows:
> $rdrloc=”https://www.xulucorp.com/company/cartartwork.html”;
> $http_headers_out{'Location'} = [ $rdrloc, 302 ]; # we have 
> tried with 301
> 
> Our routines are run from the html page using Execute with 
> import set to true, and clean defaulted (from the manual - 
> set to zero). I have a feeling that the CLEANUP handler is 
> not being called, so the session is not being written and 
> $udat is not being cleared. The next user of the process just 
> inherits the session and the data.
> 
> I found a thread where someone was having a similar problem, 
> by I don't see it being solved:
> http://www2.ecos.de/~mailarc/embperl/2002-12/msg00053.html
> <http://www2.ecos.de/%7Emailarc/embperl/2002-12/msg00053.html>
> 
> ---------------------
> Server specs:
> 
> Fedora Core release 1 (Yarrow)
> perl, v5.8.3 built for i386-linux-thread-multi
> mod_perl/1.99_12
> Embperl 2.0b11
> Apache/2.0.50
> 
> ----------------------
> 
> I may try it with CLEANUP set to 1 for immediate, but I am 
> not sure if that has any adverse effects besides server 
> performance. We have had similar issues when we used LOCATION 
> redirects that were not absolute, but the example above is an 
> absolute redirect and the problem still exists.
> 
> Anyone have any ideas why this problem is occuring and what 
> we need to do to correct it?
> 
> 
> Thanks for all your help,
> Cliff
> 
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
> 
> 


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to