-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, October 28, 2005 16:33, john crawford wrote:
> Hello.
>
>
> As I've now seen sess_deleted files show up in the php
> cache, it seems to be an issue with the sess_deleted php / IE bug.

> If I run from cron pretty aggressively

> find /var/spool/php -name '*deleted*' -print | xargs -I {} sh -c "ls -lT
> {} | /var/qmail/bin/mailsubj "sess_deleted" [EMAIL PROTECTED]"

> I detect the file. Maybe some IE users have the date badly set in
> their hardware and IE doesn't do the fall-back aged session deletion.

> Can someone help me with the php workaround for squirrelmail to avoid
> this and/or recommend a solid version of php that does a better job of
> closing out sessions?

If you cannot upgrade PHP, try the following:

  http://php.net/session-regenerate-id

If you scroll down, you should see a comment by "timo at frenay dot net"
which duplicates the code if it is not available.  With one exception, you
should see a bit "setcookie('PHPSESSID'...", change that to
setcookie($session_name... and add "global $session_name;" at the top of
the  "session_regenerate_id" function.  Add this to functions/global.php,
at the bottom will work, just above the ?>.

Once you have put it in, find the function sqsession_is_active, and after
the $sessid = session_id(); line, add:

while ($sessid == 'deleted') {
  session_regenerate_id();
}

See if that helps.  I'll see if I can knock together a patch to make this
a little easier ;)

- -- 
Jonathan Angliss
<[EMAIL PROTECTED]>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iEYEARECAAYFAkNi1s8ACgkQK4PoFPj9H3PfswCbBl4osXBI127nHzmvT28xFGzq
NwcAoJJD5gMsafI4E+RU/izkjRoXsy20
=XVZX
-----END PGP SIGNATURE-----



-------------------------------------------------------
This SF.Net email is sponsored by the JBoss Inc.
Get Certified Today * Register for a JBoss Training Course
Free Certification Exam for All Training Attendees Through End of 2005
Visit http://www.jboss.com/services/certification for more information
--
squirrelmail-users mailing list
Posting Guidelines: 
http://www.squirrelmail.org/wiki/MailingListPostingGuidelines
List Address: [email protected]
List Archives: 
http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id)95
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to