From: lthaete at secmgmt dot com
Operating system: Fedora
PHP version: 4.3.6
PHP Bug Type: Session related
Bug description: Loss of session data when viewing with IE 6
Description:
------------
Open the index page with IE (I was using version 6).
The page data on the page and in the sess_ file will match.
Now follow the link to page one the session data seen with
print_r will be correct, but the session data in the sess_ file
will have not changed. It is because of the image tag with
no image entry. Remove the image tag and refresh and the page
and the session file will match. Now replace the image tag
and refresh the page the session file will revert to it origional
value, the one stored from the index page even if you are on
page one. This does not happen with netscape or mozilla.
Reproduce code:
---------------
--------------------- constants.php --------------------
<?
define("PAGE_INDEX", 0);
define("PAGE_ONE", 1);
define("ACTION_INDEX", 0);
define("ACTION_ONE", 1);
?>
-------------------- index.php --------------------------
<?
require "constants.php";
session_start();
$_SESSION["CURRENT_PAGE"] = PAGE_INDEX;
$_SESSION["CURRENT_ACTION"] = ACTION_INDEX;
?>
<html>
<head>
<title>Session Error Index Page</title>
</head>
<body>
Session Error Index Page
<pre>
<? print_r($_SESSION); ?>
</pre>
<br>
<a href="one.php">Session Error Page One</a>
<br>
<img src="" border="0" width="1" height="1">
</body>
</html>
----------------- one.php ----------------------
<?
require "constants.php";
session_start();
$_SESSION["CURRENT_PAGE"] = PAGE_ONE;
$_SESSION["CURRENT_ACTION"] = ACTION_ONE;
?>
<html>
<head>
<title>Session Error Page One</title>
</head>
<body>
Session Error Page One
<pre>
<? print_r($_SESSION); ?>
</pre>
<br>
<img src="" border="0" width="1" height="1">
</body>
</html>
------------------------------------------------
Expected result:
----------------
Session values in the session file are changed to match session data
during script execution
Actual result:
--------------
Session file data does not change from origional values.
--
Edit bug report at http://bugs.php.net/?id=28678&edit=1
--
Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=28678&r=trysnapshot4
Try a CVS snapshot (php5): http://bugs.php.net/fix.php?id=28678&r=trysnapshot5
Fixed in CVS: http://bugs.php.net/fix.php?id=28678&r=fixedcvs
Fixed in release: http://bugs.php.net/fix.php?id=28678&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=28678&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=28678&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=28678&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=28678&r=support
Expected behavior: http://bugs.php.net/fix.php?id=28678&r=notwrong
Not enough info: http://bugs.php.net/fix.php?id=28678&r=notenoughinfo
Submitted twice: http://bugs.php.net/fix.php?id=28678&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=28678&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=28678&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=28678&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=28678&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=28678&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=28678&r=float
