Re: [PHP] php sessions

From: Curt Zirzow (php-general_at_zirzow.dyndns.org)
Date: 10/28/03

  • Next message: Rob Adams: "Re: [PHP] php sessions" 
    Date: Tue, 28 Oct 2003 20:15:56 +0000
To: php-general@lists.php.net

    * Thus wrote Rob Adams (rob_adams@hotmail.com):
    > I will test it, because it seems I don't understand this issue as much as I
    > could. But I can already tell you results I see right now:
    >
    > I open a web browser (IE) and login to my application. I open another
    > window (IE) and goto the web application, and it asks me to login. This is
    > all on the same computer. (As I've explained all this before.) Now,
    > perhaps I don't know what I'm talking about, and this is a different issue.
    > If so, I'm pretty sure you'll certainly try to set me straight. If not,
    > then it certainly seems relevant to the discussion, and that my one client
    > (IE) is sending two different requests from two different windows on the
    > same computer.

    This is entirely up to the client, deciding to send a cookie or not
    when opening a new browser window. You can even turn the behaviour,
    you describe, off in IE.

    The problem is the php script doesn't know that the browser you
    opened (that give you back the login screen) is even related to the
    other browser window. All the php script knows is that you simply
    don't have a cookie.

    Curt 

    -- 
"My PHP key is worn out"
  PHP List stats since 1997: 
    http://zirzow.dyndns.org/html/mlists/
  • Next message: Rob Adams: "Re: [PHP] php sessions"

    Relevant Pages

    • Re: SoapClient and Cookies
      ... running a simple php script on my ubuntu machine. ... servers first requires you to login via a login method by supplying ... only accessible if you have received the cookie above. ...
      (comp.lang.php)
    • Re: [PHP] php sessions
      ... > This is entirely up to the client, deciding to send a cookie or not ... > when opening a new browser window. ... All the php script knows is that you simply ... > don't have a cookie. ...
      (php.general)
    • Re: Kerberos
      ... IE uses those security zones to work out whether to send credentials to a server without prompting the user. ... If you have a browser window open and then click a link (eg ... username and password (this is a windows style login box). ...
      (microsoft.public.inetserver.iis.security)
    • not authenticating when redirected from another page
      ... target page, it first checks to see if the user/browser is authenticated. ... the page I wanted after a successful login. ... authenticate, it sends the login page back again. ... even though I'm using the same browser window. ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: Kerberos
      ... Has the user ever visited the SSO page or portal prior to clicking the link etc? ... credentials to a server without prompting the user. ... If you have a browser window open and then click a> link ... > username and password (this is a windows style login box). ...
      (microsoft.public.inetserver.iis.security)