RE: Re[4]: [PHP] sessions help

2002-06-13 Thread Lazor, Ed

Have you tried this on a separate web page to make sure it's not something
server specific?

Here's a script that worked from my computer with register_globals set to on
and off (restarted server between tests for confirmation).

If this works from your computer, could you resend the code on your page?

Thanks,

-Ed


  With register_globals=Off, I understand that you need to 
 extract the $_POST 
  and $_GET vars. I assumed the same for $_SESSIONS. Is this not true?
 
 No. If you use $_GET, $_POST and $_SESSION to get to those 
 variables then there
 is no need to extract them into the global scope.
 

This message is intended for the sole use of the individual and entity to
whom it is addressed, and may contain information that is privileged,
confidential and exempt from disclosure under applicable law.  If you are
not the intended addressee, nor authorized to receive for the intended
addressee, you are hereby notified that you may not use, copy, disclose or
distribute to anyone the message or any information contained in the
message.  If you have received this message in error, please immediately
advise the sender by reply email and delete the message.  Thank you very
much.   

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




RE: Re[4]: [PHP] sessions help

2002-06-13 Thread Leston Drake

At 04:35 PM 6/13/2002, you wrote:
Have you tried this on a separate web page to make sure it's not something
server specific?

No, but that's a good idea. I will try it.


Here's a script that worked from my computer with register_globals set to on
and off (restarted server between tests for confirmation).

Did you send some code? I didn't receive any...?


If this works from your computer, could you resend the code on your page?

Thanks,

-Ed


Thanks for your help,
Leston



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




RE: Re[4]: [PHP] sessions help

2002-06-13 Thread Leston Drake


Hey, it worked on another server!
I've been working on my local machine's server (localhost), but when I run 
it from a different web server, it worked fine.

Any ideas about which setting(s) may be causing the problem?

 From my php.ini file:
session.save_handler=files
session.save_path= C:\PHP\sessiondata
session.use_cookies=1
session.name=PHPSESSID
session.auto_start=0
session.cookie_lifetime=0
session.cookie_path=/
session.cookie_domain=
session.serialize_handler=php
session.gc_probability=1
session.gc_maxlifetime=1440
session.referer_check=
session.entropy_length=0
session.entropy_file=
session.cache_limiter=nocache
session.cache_expire=180
session.use_trans_sid=1


At 04:35 PM 6/13/2002, you wrote:
Have you tried this on a separate web page to make sure it's not something
server specific?


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php




RE: Re[4]: [PHP] sessions help

2002-06-13 Thread Lazor, Ed

 Hey, it worked on another server!
 I've been working on my local machine's server (localhost), 
 but when I run it from a different web server, it worked fine.
 
 Any ideas about which setting(s) may be causing the problem?

Nope, but I'm including a copy of my local php.ini for ya to compare with.

[PHP]

;;;
; About this file ;
;;;
;
; This is the recommended, PHP 4-style version of the php.ini-dist file.  It
; sets some non standard settings, that make PHP more efficient, more
secure,
; and encourage cleaner coding.
; The price is that with these settings, PHP may be incompatible with some
; applications, and sometimes, more difficult to develop with.  Using this
; file is warmly recommended for production sites.  As all of the changes
from
; the standard settings are thoroughly documented, you can go over each one,
; and decide whether you want to use it or not.
;
; For general information about the php.ini file, please consult the
php.ini-dist
; file, included in your PHP distribution.
;
; This file is different from the php.ini-dist file in the fact that it
features
; different values for several directives, in order to improve performance,
while
; possibly breaking compatibility with the standard out-of-the-box behavior
of
; PHP 3.  Please make sure you read what's different, and modify your
scripts
; accordingly, if you decide to use this file instead.
;
; - register_globals = Off [Security, Performance]
; Global variables are no longer registered for input data (POST, GET,
cookies,
; environment and other server variables).  Instead of using $foo, you
must use
; you can use $_REQUEST[foo] (includes any variable that arrives
through the
; request, namely, POST, GET and cookie variables), or use one of the
specific
; $_GET[foo], $_POST[foo], $_COOKIE[foo] or $_FILES[foo],
depending
; on where the input originates.  Also, you can look at the
; import_request_variables() function.
; Note that register_globals is going to be depracated (i.e., turned off
by
; default) in the next version of PHP, because it often leads to
security bugs.
; Read http://php.net/manual/en/security.registerglobals.php for further
; information.
; - display_errors = Off   [Security]
; With this directive set to off, errors that occur during the execution
of
; scripts will no longer be displayed as a part of the script output,
and thus,
; will no longer be exposed to remote users.  With some errors, the
error message
; content may expose information about your script, web server, or
database
; server that may be exploitable for hacking.  Production sites should
have this
; directive set to off.
; - log_errors = On[Security]
; This directive complements the above one.  Any errors that occur
during the
; execution of your script will be logged (typically, to your server's
error log,
; but can be configured in several ways).  Along with setting
display_errors to off,
; this setup gives you the ability to fully understand what may have
gone wrong,
; without exposing any sensitive information to remote users.
; - output_buffering = 4096[Performance]
; Set a 4KB output buffer.  Enabling output buffering typically results
in less
; writes, and sometimes less packets sent on the wire, which can often
lead to
; better performance.  The gain this directive actually yields greatly
depends
; on which Web server you're working with, and what kind of scripts
you're using.
; - register_argc_argv = Off   [Performance]
; Disables registration of the somewhat redundant $argv and $argc global
; variables.
; - magic_quotes_gpc = Off [Performance]
; Input data is no longer escaped with slashes so that it can be sent
into
; SQL databases without further manipulation.  Instead, you should use
the
; function addslashes() on each input element you wish to send to a
database.
; - variables_order = GPCS   [Performance]
; The environment variables are not hashed into the $HTTP_ENV_VARS[].
To access
; environment variables, you can use getenv() instead.
; - error_reporting = E_ALL[Code Cleanliness, Security(?)]
; By default, PHP surpresses errors of type E_NOTICE.  These error
messages
; are emitted for non-critical errors, but that could be a symptom of a
bigger
; problem.  Most notably, this will cause error messages about the use
; of uninitialized variables to be displayed.
; - allow_call_time_pass_reference = Off [Code cleanliness]
; It's not possible to decide to force a variable to be passed by
reference
; when calling a function.  The PHP 4 style to do this is by making the
; function require the relevant argument by reference.



; Language Options ;


; Enable the PHP scripting language engine under Apache.
engine = On

; Allow the ? tag.