Gede Gilijk wrote:

> This is a simple autentification script using session
> I try to echo the session_id().
> But to my surprise, the value of session_id() is different - in
> configuration -
> if I use difference browser.
> 
> IE :
> 9ff68d81039d9ece3ba9840328b91488
> 
> Opera :
> 7aa4895172b5a4785c9fb754eaf792aa
> 
> NN :
> 1007630964


How did you get this? Normal session ID is MD5 hash value.
Therefore, session id is string that has 32 chars and consists of
a-z0-9.

The only reason that I can think of is you have cookie that has
cookie in your NN.

Check your NN's cookie, I'm sure you have a cookie which has
"1007670964".

BTW, session module will *not* validate if session id is MD5 hash
or not. Programmer should check if session id format is valid or not.

--
Yasuo Ohgaki

> 
> Anybody face this thing ?
> 
> <?
> session_start();
> 
>  echo "<h1>Members only</h1>";
> 
>  // Check session variable
>  if (session_is_registered("valid_user"))
>  {
>          echo "<p>You log in as $valid_user.</p>";
>          $sess_id = session_id();
>          echo "$sess_id<br>";
>  } else {
>          echo "<p>You have not login yet</p>";
>  }
> 
>  echo "<a href=\"authmain.php\">Back to main page</a>";
> 
>  ?>
> 
> Regards,
> 
> Gede Gilijk
> 
> 
> 


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Reply via email to