[PHP] Re: session in https

2001-12-04 Thread php geko

"Richard Lynch" <[EMAIL PROTECTED]> wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Php Geko wrote:
>
> > I am trying to set some sessions variables in an https (SSL):
> > session_start();
> > ...
> > $row = $results[0];
> > session_register("myses");
> > if(session_is_registered("myses")){
> >
>
$myses=array("id"=>$row["user_id"],"username"=>$row["username"],"password"=>
> > $row["password"]);
> > $myses=serialize($myses);
> > }
> >
> > the to go to another php script in where I want to call my vars i use:
> > Please continue
> >
> > in the delivery.php I want to call the session vars:
> > session_start();
> > ...
> > $myses=unserialize($myses);
> > echo "Session ID: " .$PHPSESSID .NL;
> > echo "ID..." .$myses["id"] . NL;
> > echo "username..." .$myses["username"] . NL;
> >
> > I receive blanks ... although the session is set in the /temp directory.
> > It has a value in it but I don't have permission to read the value of my
> > sess.
>
> If PHP can't read tmp, sessions won't work at all.
>
> But sounds more like you are not realizing that sessions do *NOT*
> automatically transfer across the HTTPS / HTTP boundaries.
> You'll need to track their ID and "hand transfer" it.
>
> --
> Like music?  http://l-i-e.com/artists.htm
>


richard, i use session_id($sid); in the secure part to use the session id og
the nonsecure part.
In the secure part I can access the session vars that I created in the
non-secure part. But I can't access the ones I created in the secure part.

Luc




-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]




[PHP] Re: session in https

2001-12-04 Thread Richard Lynch

Php Geko wrote:

> I am trying to set some sessions variables in an https (SSL):
> session_start();
> ...
> $row = $results[0];
> session_register("myses");
> if(session_is_registered("myses")){
> 
$myses=array("id"=>$row["user_id"],"username"=>$row["username"],"password"=>
> $row["password"]);
> $myses=serialize($myses);
> }
> 
> the to go to another php script in where I want to call my vars i use:
> Please continue
> 
> in the delivery.php I want to call the session vars:
> session_start();
> ...
> $myses=unserialize($myses);
> echo "Session ID: " .$PHPSESSID .NL;
> echo "ID..." .$myses["id"] . NL;
> echo "username..." .$myses["username"] . NL;
> 
> I receive blanks ... although the session is set in the /temp directory.
> It has a value in it but I don't have permission to read the value of my
> sess.

If PHP can't read tmp, sessions won't work at all.

But sounds more like you are not realizing that sessions do *NOT* 
automatically transfer across the HTTPS / HTTP boundaries.
You'll need to track their ID and "hand transfer" it.

-- 
Like music?  http://l-i-e.com/artists.htm


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]