[PHP-DEV] Bug #9502 Updated: IE5.5 SP1: New browser instances displaying same session id

2001-06-20 Thread sniper

ID: 9502
Updated by: sniper
Reported By: [EMAIL PROTECTED]
Status: Bogus
Bug Type: *Session related
Operating system: 
PHP Version: 4.0.4pl1
Assigned To: 
Comments:

I suggest you report this to Microsoft. As it can not 
by any means be a server side problem. And you said it
yourself, it works with older IE and with NS.

Still bogus.




Previous Comments:
---

[2001-06-15 08:40:42] [EMAIL PROTECTED]
I get the same session id's when I open up DIFFERENT instances of IE.  So, 
start->Programs->Internet Explorer
MULTIPLE times.

---

[2001-06-14 23:24:54] [EMAIL PROTECTED]
Of course you get same session id's. Cookies are 
shared between new windows opened from same browser.


---

[2001-02-28 16:36:33] [EMAIL PROTECTED]
My browser:
IE 5.50.4522.1800  Update Version:; SP1;

When running the script below on different instances of my browser I get the SAME 
session id appear.  This does not occur in IE5.0 or Netscape 4.6/4.73 (i.e., I get the 
expected behaviour of different session ids appearing).
Please can someone investigate this since it appears to be a very serious security 
issue.

Many Thanks
Dipen




Listing 7.6


Diagnostic Informationn");
print("Session Name: " . session_name() . "n");
print("Session ID: " . session_id() . "n");
print("Session Module Name: " . session_module_name() . "n");
print("Session Save Path: " . session_save_path() . "n");
print("Encoded Session:" . session_encode() . "n");

print("n");

if($Name != "")
{
print("Hello, $Name!n");
}

print("You have viewed this page $Count times!n");

//show form for getting name
print("");
print("n");
print("n");
print("");

// added by dk (n.b. $SCRIPT_NAME is apache environment variable)
print("script_name:  " . $SCRIPT_NAME . "n");
print("SID:  " . SID . "n");
// --

//use a link to reload this page
print("Reloadn");
?>



---



ATTENTION! Do NOT reply to this email!
To reply, use the web interface found at http://bugs.php.net/?id=9502&edit=2


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]




[PHP-DEV] Bug #9502 Updated: IE5.5 SP1: New browser instances displaying same session id

2001-06-19 Thread dipen2001

ID: 9502
User Update by: [EMAIL PROTECTED]
Status: Bogus
Bug Type: *Session related
Operating system: server: BSDI BSD/OS 4.1 Kernel #
PHP Version: 4.0.4pl1
Description: IE5.5 SP1: New browser instances displaying same session id

I get the same session id's when I open up DIFFERENT instances of IE.  So, 
start->Programs->Internet Explorer
MULTIPLE times.

Previous Comments:
---

[2001-06-14 23:24:54] [EMAIL PROTECTED]
Of course you get same session id's. Cookies are 
shared between new windows opened from same browser.


---

[2001-02-28 16:36:33] [EMAIL PROTECTED]
My browser:
IE 5.50.4522.1800  Update Version:; SP1;

When running the script below on different instances of my browser I get the SAME 
session id appear.  This does not occur in IE5.0 or Netscape 4.6/4.73 (i.e., I get the 
expected behaviour of different session ids appearing).
Please can someone investigate this since it appears to be a very serious security 
issue.

Many Thanks
Dipen




Listing 7.6


Diagnostic Informationn");
print("Session Name: " . session_name() . "n");
print("Session ID: " . session_id() . "n");
print("Session Module Name: " . session_module_name() . "n");
print("Session Save Path: " . session_save_path() . "n");
print("Encoded Session:" . session_encode() . "n");

print("n");

if($Name != "")
{
print("Hello, $Name!n");
}

print("You have viewed this page $Count times!n");

//show form for getting name
print("");
print("n");
print("n");
print("");

// added by dk (n.b. $SCRIPT_NAME is apache environment variable)
print("script_name:  " . $SCRIPT_NAME . "n");
print("SID:  " . SID . "n");
// --

//use a link to reload this page
print("Reloadn");
?>



---


Full Bug description available at: http://bugs.php.net/?id=9502


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]




[PHP-DEV] Bug #9502 Updated: IE5.5 SP1: New browser instances displaying same session id

2001-06-18 Thread sniper

ID: 9502
Updated by: sniper
Reported By: [EMAIL PROTECTED]
Old-Status: Open
Status: Bogus
Bug Type: *Session related
Operating system: 
PHP Version: 4.0.4pl1
Assigned To: 
Comments:

Of course you get same session id's. Cookies are 
shared between new windows opened from same browser.


Previous Comments:
---

[2001-02-28 16:36:33] [EMAIL PROTECTED]
My browser:
IE 5.50.4522.1800  Update Version:; SP1;

When running the script below on different instances of my browser I get the SAME 
session id appear.  This does not occur in IE5.0 or Netscape 4.6/4.73 (i.e., I get the 
expected behaviour of different session ids appearing).
Please can someone investigate this since it appears to be a very serious security 
issue.

Many Thanks
Dipen




Listing 7.6


Diagnostic Informationn");
print("Session Name: " . session_name() . "n");
print("Session ID: " . session_id() . "n");
print("Session Module Name: " . session_module_name() . "n");
print("Session Save Path: " . session_save_path() . "n");
print("Encoded Session:" . session_encode() . "n");

print("n");

if($Name != "")
{
print("Hello, $Name!n");
}

print("You have viewed this page $Count times!n");

//show form for getting name
print("");
print("n");
print("n");
print("");

// added by dk (n.b. $SCRIPT_NAME is apache environment variable)
print("script_name:  " . $SCRIPT_NAME . "n");
print("SID:  " . SID . "n");
// --

//use a link to reload this page
print("Reloadn");
?>



---



ATTENTION! Do NOT reply to this email!
To reply, use the web interface found at http://bugs.php.net/?id=9502&edit=2


-- 
PHP Development Mailing List 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]