Re: [PHP-DB] Heop someone can help with this.. involves sessions.

2003-09-02 Thread CPT John W. Holmes
From: "Aaron Wolski" <[EMAIL PROTECTED]>

> I really hope you don't mind the OT post but I've looked everywhere and
> can't seem to find a solution to my problem.
>
> I am passing a var in a session (not in the URL) to my secure checkout
> area and it's not capturing the variable.
>
> I know there is a problem with using sessions across non-SSL and SSL but
> I was hoping someone would have an idea as to how to accomplish this?
>
> Both domains are setup on the same box.. the secure SSL area is
> secure.mydomain.com

The session id is maintained in a cookie (by default), so when you switch
from "non-secure" to "secure" you are probably losing the cookie because of
the difference in domains.

You need to pass the session id in the URL when switching to "secure" mode.

---John Holmes...

-- 
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



[PHP-DB] Heop someone can help with this.. involves sessions.

2003-08-28 Thread Aaron Wolski
Hi Guys,
 
I really hope you don't mind the OT post but I've looked everywhere and
can't seem to find a solution to my problem.
 
I am passing a var in a session (not in the URL) to my secure checkout
area and it's not capturing the variable.
 
I know there is a problem with using sessions across non-SSL and SSL but
I was hoping someone would have an idea as to how to accomplish this?
 
Both domains are setup on the same box.. the secure SSL area is
secure.mydomain.com
 
Any ideas?
 
Thanks!
 
Aaron