We have a site which requires users log in. Once they do so a session is created (session_start), some data is saved as session data, particularly data which identifies the user, their privileges, etc. If the session ends, breaks, etc. The user must log in again.

There are also forms on the site. When a user submits a form, data, both posted and session, is saved to a MySQL database.

If a session breaks when a user submits data via the form, the result is that the user must log in again, the data is lost and the user unhappy. This happens rarely - but when it does, it can upset the user who has put effort into completing the form.

Is there a simple yet secure way of preventing this problem - for example passing the session id with the form and resurrecting the session if it has broken?

Thanks,

Jeff

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to