RE: phpbb / sessionid nightmare

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sat, April 28, 2007 4:46 pm, Brad Sumrall wrote:
> The cookie it's self says
> PHPSESSID=26b7974a5d71c7d0bfebbf71750dac7b
> Path=/
> Host=www.domain.com
>
> When I go to the jacked up page, I pickup this one
> PHPSESSID=a787e077dd18ed18cb824f664d38315d
> Path=/
> Host=domain.com

As I recall, it depends on your browser settings, maybe, but having
www.domain.com and domain.com will probably break at least *SOME*
browsers/users with strict security settings.

Get your cookies to agree on the domain, and get the URLs to always be
the same as well.

This is usually achieved with DNS settings and Apache in one place,
rather than dinking around in PHP with re-directs, but if all you have
is a hammer...

> In the directory structure, I have gone from
> /phpbb/login.php
> to
> /contest_stories.php?cid=8
>
> Is the Path or the fact that I am going to www.domain.com to
> domain.com have
> anything to do with it?

The path of "/" matches both those URLs, and *any* URL for that
matter, so that's fine.

-- 
Some people have a "gift" link here.
Know what I want?
I want you to buy a CD from some indie artist.
http://cdbaby.com/browse/from/lynch
Yeah, I get a buck. So?

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux