[PHP] Re: session overwriting global

2009-12-05 Thread Horváth Károly

Shawn McKenzie írta:

Horváth Károly wrote:
  

Hi,

I have a very strange problem.
I am the new developer of an existing site. They have a custom session
handler that stores the session in the database. The application
connects to the database, registers the session handler with
session_set_save_handler. Nothing interesting so far.
Then it calls session_start which updates one of the global variables!!!
I checked the session read(..) method and just before returning the
global is untocuhed.
Can anybody explain how could that happen?

additional info:
the global variable is also stored in the session.
php 4.4.9, the problem only occurs on the dev server and not on the live
site, and only with https! as far as we know the server configurations
are identical except that that on the dev server we have an ssl
certificate which is not verified so the browser shows the usual
warning/accept certificate message.




register_globals = On in php.ini?
  


no.

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



[PHP] Re: session overwriting global

2009-12-05 Thread Shawn McKenzie
Horváth Károly wrote:
> Hi,
> 
> I have a very strange problem.
> I am the new developer of an existing site. They have a custom session
> handler that stores the session in the database. The application
> connects to the database, registers the session handler with
> session_set_save_handler. Nothing interesting so far.
> Then it calls session_start which updates one of the global variables!!!
> I checked the session read(..) method and just before returning the
> global is untocuhed.
> Can anybody explain how could that happen?
> 
> additional info:
> the global variable is also stored in the session.
> php 4.4.9, the problem only occurs on the dev server and not on the live
> site, and only with https! as far as we know the server configurations
> are identical except that that on the dev server we have an ssl
> certificate which is not verified so the browser shows the usual
> warning/accept certificate message.
> 

register_globals = On in php.ini?

-- 
Thanks!
-Shawn
http://www.spidean.com

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php