From: php at webfreezer dot com Operating system: SuSe Linux 8.1 PHP version: 4.3.3 PHP Bug Type: Session related Bug description: SessionID in URL sometimes ignored
Description: ------------ PHP sometimes does not want to use the sessionID given via GET! This happens only on some occasions however it is reproducible on such a certain page. I regret that I cannot post a short code snippet because it simply does not happen when testing with a short code snippet. What happens is the following: - the SID is used as a GET parameter (this works on every other page!) - $sidname=session_name(); echo $_GET[$sidname] outputs the correct SID visible in the URL (e.g. "/search.php?page=2&qid=1&sessionID=1291bfd78301f151803ca632cd41f626") - however echo session_id() outputs a totally different SID! - both (old and new) SID files exist and are readable session.auto_start=0 session.use_cookies=0 session.use_only_cookies=0 session.referer_check=0 I even implemented my own session handler and it appears that PHP does not even call the OPEN function for the "old" SID that it no longer wants to use. I also tried to use the generic PHPSESSID name instead of the custom "sessionID" by not setting the custom name, but the problem still exists. This is my configure line: './configure' '--with-apache=../apache_1.3.28' '--with-mhash=/usr/local/lib' '--with-zlib-dir=/usr/local/lib' '--with-zip=/usr/local/lib' '--enable-memory-limit' '--enable-versioning' '--with-gd' '--enable-exif' '--with-config-file-path=/etc' '--enable-magic-quotes' '--enable-thread-safety' '--with-gettext' '--with-xml' '--with-mcrypt' '--enable-calendar' '--enable-bcmath' '--with-curl' '--with-curlwrappers' '--enable-ftp' '--enable-wddx' '--with-jpeg-dir=/usr/lib' -- Edit bug report at http://bugs.php.net/?id=25934&edit=1 -- Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=25934&r=trysnapshot4 Try a CVS snapshot (php5): http://bugs.php.net/fix.php?id=25934&r=trysnapshot5 Fixed in CVS: http://bugs.php.net/fix.php?id=25934&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=25934&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=25934&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=25934&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=25934&r=support Expected behavior: http://bugs.php.net/fix.php?id=25934&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=25934&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=25934&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=25934&r=globals PHP 3 support discontinued: http://bugs.php.net/fix.php?id=25934&r=php3 Daylight Savings: http://bugs.php.net/fix.php?id=25934&r=dst IIS Stability: http://bugs.php.net/fix.php?id=25934&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=25934&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=25934&r=float
