Re: Session problems

From: Daniel Bengs (a-very_at_non-existing-e-mail-adress.com)
Date: 10/30/03 

Date: Thu, 30 Oct 2003 17:01:15 +0200

Daniel Bengs wrote:

> Matthias Esken wrote:
>
>> Daniel Bengs <a-very@non-existing-e-mail-adress.com> schrieb:
>>
>>
>>> I've got a problem where a normal string variable loses its value
>>> after session_start() is called. The funny thing is, that this only
>>> happens for some people, and they are using IE6, but it does not
>>> happen with all versions of IE6. I've tested myself only with Mozilla
>>> and IE5, but the problem does not occur for me.
>>
>>
>>
>> Very strange. PHP is running on the server, not on the browser.
>>
>>
>>> I've got a username stored in $user, which is obtained from the $_POST
>>> variable, but after session_start() is called $user is empty, but the
>>> username still is in $_POST['username'].
>>
>>
>>
>> This is one of the problems if register_globals is activated. Could you
>> check this?
>
>
> Yes, according to phpinfo() register globals is on.
>

What's also common for the people in this case is that they are on an
internal network, not that I understand why that would make any
difference either... :)

And now I also noticed another funny thing. On one page where an
addition to a mysql database is made a field, which is the user who made
the addition, is empty for some persons, but not everyone who makes the
addition. The username value is retrieved with:

"((string) $_SESSION['username'])".

But when the username, on the same page, is written to a logfile, with
the same code above, it is not empty.

Relevant Pages

  • Re: validating security token when only username is specified
    ... password type is SendHashed and the Authenticator will be called. ... string should probably be allowed across the logic on both sides to at least ... > You will notice you can set a null or "" empty pw in UT constructor. ... >> but when i do not send password in username token. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Re: validating security token when only username is specified
    ... to wonder what the point of a empty password is to begin with. ... not sure the Trim() behavior is correct ... > i have overridden authenticatetoken method in username tokenmanager class ... > but when i do not send password in username token. ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • RE: Run Advertised Programs is empty
    ... the SID, not the username, but any special characters in this username? ... Also I have found that when this troubling account logs in there are errors ... Is it a clew that Add New Programs also is empty? ... The other machine he logs in to is also in the collection. ...
    (microsoft.public.sms.misc)
  • Re: Session problems
    ... > addition to a mysql database is made a field, which is the user who made ... The username value is retrieved with: ... it is not empty. ... Regards, ...
    (comp.lang.php)