Session ID changed everytime go to new page or reload.

**Jerry Stuckle** · Apr 9 '07, 11:55 AM

Re: Session ID changed everytime go to new page or reload.

Bocah Sableng wrote:

Hi, I'm new member of this group.
>
I had added new virtual host at my intranet server. The new virtual
host configuration on httpd.conf is similar with the old one.
At the new virtual host, the session id seems changed every
interaction to server (new page or reload).
The old one is fine, the session id keeps at the same string.
Both are at the same server.
I use Apache 2.2.3 (Win32) with PHP 5.2.0.
>
Tested using code below:
session_start() ;
echo session_id();
>
>
PHP Configuration :
session.save_ha ndler = files
;session.save_p ath = "/tmp"
session.use_coo kies = 1
;session.use_on ly_cookies = 1
session.name = PHPSESSID
session.auto_st art = 0
session.cookie_ lifetime = 0
session.cookie_ path = /
session.cookie_ domain =
session.seriali ze_handler = php
session.gc_prob ability = 1
session.gc_divi sor = 1000
session.gc_maxl ifetime = 1440
session.bug_com pat_42 = 0
session.bug_com pat_warn = 1
session.referer _check =
session.entropy _length = 0
session.entropy _file =
;session.entrop y_length = 16
;session.entrop y_file = /dev/urandom
session.cache_l imiter = nocache
session.cache_e xpire = 180
session.use_tra ns_sid = 0
session.hash_fu nction = 0
session.hash_bi ts_per_characte r = 5
>
How to fix the new host to keep its session id unchanged?
Sorry for the bad english.
TIA
>

What's in your Apache error log (or where ever you have your PHP errors
being logged)?

--
=============== ===
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attgl obal.net
=============== ===

**Bocah Sableng** · Apr 9 '07, 12:55 PM

Re: Session ID changed everytime go to new page or reload.

On Apr 9, 7:52 pm, Jerry Stuckle <jstuck...@attg lobal.netwrote:

>
What's in your Apache error log (or where ever you have your PHP errors
being logged)?
>

Thanks for you response.

There's no line indicating any error on my Apache error log, and the
PHP errors are not logged.

The php code I posted before seems normally executed. Here is a snip
from my Apache access log (and repeated several times) :
192.168.1.90 - - [09/Apr/2007:11:54:17 +0700] "GET /session_id.php
HTTP/1.1" 200 330

I don't know the mechanisms of session id generation. 'Cos when I move
the new virtual host at the top and accessed using its local IP
address (192.168.1.90), the problem disappears. But when accessed
using named vhost (even if the new vhost config at the top), the
problem still remain.
Should I post the vhost config? (This group is php newsgroup)

And another info:
I use 'register_globa ls=on' and also 'register_long_ arrays=on' for
backward compatibility with my ancient scripts. I know it's a bad
habit, but I use the application and the server both for intranet app
only and I don't have much time to fix all.

Thanks.

**Bocah Sableng** · Apr 9 '07, 01:25 PM

Re: Session ID changed everytime go to new page or reload.

On Apr 9, 7:54 pm, "Bocah Sableng" <cahsabl...@gma il.comwrote:

[...]

And another info:

I found Bug #16263 on http://bugs.php.net/bug.php?id=16263.
But I don't think it's the same problem.

**Gordon Burditt** · Apr 9 '07, 10:55 PM

Re: Session ID changed everytime go to new page or reload.

>I had added new virtual host at my intranet server. The new virtual

>host configuration on httpd.conf is similar with the old one.

What is the domain name of the new host and the old one? If they
are in different domains, the browser won't send cookies (including
the session cookie) from one domain to another. Do you have
cross-links between virtual hosts? It looks like you are using
host-only cookies (session.cookie _domain unset), so cookies won't
be passed by the browser between hosts.

>At the new virtual host, the session id seems changed every
>interaction to server (new page or reload).
>The old one is fine, the session id keeps at the same string.
>Both are at the same server.
>I use Apache 2.2.3 (Win32) with PHP 5.2.0.
>
>Tested using code below:
>session_start( );
>echo session_id();
>
>
>PHP Configuration :
>session.save_h andler = files
>;session.save_ path = "/tmp"
>session.use_co okies = 1
>;session.use_o nly_cookies = 1
>session.name = PHPSESSID
>session.auto_s tart = 0
>session.cookie _lifetime = 0
>session.cookie _path = /
>session.cookie _domain =
>session.serial ize_handler = php
>session.gc_pro bability = 1
>session.gc_div isor = 1000
>session.gc_max lifetime = 1440
>session.bug_co mpat_42 = 0
>session.bug_co mpat_warn = 1
>session.refere r_check =
>session.entrop y_length = 0
>session.entrop y_file =
>;session.entro py_length = 16
>;session.entro py_file = /dev/urandom
>session.cache_ limiter = nocache
>session.cache_ expire = 180
>session.use_tr ans_sid = 0
>session.hash_f unction = 0
>session.hash_b its_per_charact er = 5
>
>How to fix the new host to keep its session id unchanged?
>Sorry for the bad english.
>TIA
>

**Bocah Sableng** · Apr 10 '07, 02:05 AM

Re: Session ID changed everytime go to new page or reload.

On Apr 10, 5:51 am, gordonb.7i...@b urditt.org (Gordon Burditt) wrote:

>
What is the domain name of the new host and the old one?

My old domain is sinau.dev, and the new one is op_pusat.dev. (I
use .dev for development)

If they
are in different domains, the browser won't send cookies (including
the session cookie) from one domain to another.
Do you have cross-links between virtual hosts?

I don't understand the meaning of 'cross-link'

It looks like you are using
host-only cookies (session.cookie _domain unset), so cookies won't
be passed by the browser between hosts.
>

Reading your post, I found another clue. I try to check cookies.
Tested using FF 1.5, the problem disappear (session id remains
unchanged).
Using IE6, session id always changed, even if the domain is in trusted
sites list.

I try to get cookie info by executing
print_r(session _get_cookie_par ams()). Both old and new domain have the
same value:
Array
(
[lifetime] =0
[path] =/
[domain] =>
[secure] =>
[httponly] =>
)

I have read user notes php manual section session handling, but none
of the solution works for me.
Is it cookie problem?

**Gordon Burditt** · Apr 10 '07, 04:15 AM

Re: Session ID changed everytime go to new page or reload.

>What is the domain name of the new host and the old one?

>
>My old domain is sinau.dev, and the new one is op_pusat.dev. (I
>use .dev for development)

Then the domains are different.

>If they
>are in different domains, the browser won't send cookies (including
>the session cookie) from one domain to another.
>Do you have cross-links between virtual hosts?

>
>I don't understand the meaning of 'cross-link'

Domain A contains links to pages in Domain B, and vice versa.

>It looks like you are using
>host-only cookies (session.cookie _domain unset), so cookies won't
>be passed by the browser between hosts.
>>

>
>Reading your post, I found another clue. I try to check cookies.
>Tested using FF 1.5, the problem disappear (session id remains
>unchanged).
>Using IE6, session id always changed, even if the domain is in trusted
>sites list.

>I try to get cookie info by executing
>print_r(sessio n_get_cookie_pa rams()). Both old and new domain have the
>same value:
>Array
>(
[lifetime] =0
[path] =/
[domain] =>
[secure] =>
[httponly] =>
>)

Try looking at the cookie(s) on the browser. What domain(s) are they
in? There should be one cookie for each domain. Also try printing
$_COOKIE['PHPSESSID'] to see what cookie is getting sent to each page.

>I have read user notes php manual section session handling, but none
>of the solution works for me.
>Is it cookie problem?

If you are constantly getting new sessions on every page hit, it's
usually a cookie problem, assuming you are not trying to use
trans_sid. You can't maintain the *SAME* session between servers
in two different domains (even if it's the same server).

**Bocah Sableng** · Apr 10 '07, 06:35 AM

Re: Session ID changed everytime go to new page or reload.

On Apr 10, 11:12 am, gordonb.72...@b urditt.org (Gordon Burditt) wrote:

Try looking at the cookie(s) on the browser. What domain(s) are they
in? There should be one cookie for each domain. Also try printing
$_COOKIE['PHPSESSID'] to see what cookie is getting sent to each page.
>

I try to execute print_r($_COOKI E);
FF: both old and new hosts print its PHPSESSID value.
IE: old host print its PHPSESSID value, and new host print empty array
(no cookies sent?).

I have read user notes php manual section session handling, but none
of the solution works for me.
Is it cookie problem?

>
If you are constantly getting new sessions on every page hit, it's
usually a cookie problem, assuming you are not trying to use
trans_sid. You can't maintain the *SAME* session between servers
in two different domains (even if it's the same server).

I've decided to leave this problem and use IP address since I have no
idea to solve strange IE behaviour.

Thank you very much.

**Jerry Stuckle** · Apr 10 '07, 11:45 AM

Re: Session ID changed everytime go to new page or reload.

Bocah Sableng wrote:

On Apr 9, 7:52 pm, Jerry Stuckle <jstuck...@attg lobal.netwrote:

>What's in your Apache error log (or where ever you have your PHP errors
>being logged)?
>>

>
Thanks for you response.
>
There's no line indicating any error on my Apache error log, and the
PHP errors are not logged.
>
The php code I posted before seems normally executed. Here is a snip
from my Apache access log (and repeated several times) :
192.168.1.90 - - [09/Apr/2007:11:54:17 +0700] "GET /session_id.php
HTTP/1.1" 200 330
>
I don't know the mechanisms of session id generation. 'Cos when I move
the new virtual host at the top and accessed using its local IP
address (192.168.1.90), the problem disappears. But when accessed
using named vhost (even if the new vhost config at the top), the
problem still remain.
Should I post the vhost config? (This group is php newsgroup)
>
And another info:
I use 'register_globa ls=on' and also 'register_long_ arrays=on' for
backward compatibility with my ancient scripts. I know it's a bad
habit, but I use the application and the server both for intranet app
only and I don't have much time to fix all.
>
Thanks.
>

And one other thing - you are calling session_start() before ANY output
(even whitespace, DOCTYPE, etc.) in every page you need it, aren't you?

Again - I suspect you are - but sometimes the obvious gets overlooked. :-)

--
=============== ===
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attgl obal.net
=============== ===

**Gordon Burditt** · Apr 10 '07, 11:25 PM

Re: Session ID changed everytime go to new page or reload.

>Try looking at the cookie(s) on the browser. What domain(s) are they

>in? There should be one cookie for each domain. Also try printing
>$_COOKIE['PHPSESSID'] to see what cookie is getting sent to each page.
>>

>
>I try to execute print_r($_COOKI E);
>FF: both old and new hosts print its PHPSESSID value.

Same value or two different values? I'm unclear whether you are trying
to maintain a single session across multiple servers.

>IE: old host print its PHPSESSID value, and new host print empty array
>(no cookies sent?).

That's what it means, and this is likely your problem.
IE security settings are probably relevant here.

>I have read user notes php manual section session handling, but none
>of the solution works for me.
>Is it cookie problem?

>>
>If you are constantly getting new sessions on every page hit, it's
>usually a cookie problem, assuming you are not trying to use
>trans_sid. You can't maintain the *SAME* session between servers
>in two different domains (even if it's the same server).

>
>I've decided to leave this problem and use IP address since I have no
>idea to solve strange IE behaviour.
>
>Thank you very much.
>

**Bocah Sableng** · Apr 11 '07, 12:45 AM

Re: Session ID changed everytime go to new page or reload.

On Apr 10, 7:39 pm, Jerry Stuckle <jstuck...@attg lobal.netwrote:

>
And one other thing - you are calling session_start() before ANY output
(even whitespace, DOCTYPE, etc.) in every page you need it, aren't you?
>
Again - I suspect you are - but sometimes the obvious gets overlooked. :-)
>

I call session_start() before send any output to browser.
I wish my problem is just because call session_start() after sending
output to browser. :)
But tested using FF, I get normal output.

**Bocah Sableng** · Apr 11 '07, 01:05 AM

Re: Session ID changed everytime go to new page or reload.

On Apr 11, 6:16 am, gordonb.vs...@b urditt.org (Gordon Burditt) wrote:

I try to execute print_r($_COOKI E);
FF: both old and new hosts print its PHPSESSID value.

>
Same value or two different values?

Different values.

I'm unclear whether you are trying
to maintain a single session across multiple servers.

No, I'm not. I use old domain for research and the new domain for
framework testing. No interaction each other.

>

IE: old host print its PHPSESSID value, and new host print empty array
(no cookies sent?).

>
That's what it means, and this is likely your problem.
IE security settings are probably relevant here.
>

Thinking the same thing. :)

Session ID changed everytime go to new page or reload.

Session ID changed everytime go to new page or reload.

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment