Page 1 of 1

Session URL propagation

Posted: Sat May 20, 2006 9:27 pm
by alex.barylski
I can't seem to get URL propagation working in PHP on Windows XP with cookies off...

I've checked my session config settings and use_cookies_only or whatever is OFF...

And still when I refresh the page and hover over a link...that link isn't containing my session ID????

Anyone have any ideas???

Doesn't work in FF wither :)

p.s-Can't figure it out in less than an hour...I'm gonna just roll my own using the same technique as builtin sessions....booooooooooooo :(

Cheers :)

Posted: Sat May 20, 2006 9:33 pm
by feyd
is trans_sid on?

Posted: Sat May 20, 2006 9:39 pm
by alex.barylski
feyd wrote:is trans_sid on?
Edit: No it isn't...can I change that runtime using ini_set()???

I dunno...I'll take a peak :)

Posted: Sat May 20, 2006 9:45 pm
by alex.barylski
Dude.....

You are beautiful...you know that? :P

That was it...

Jesus...I hate that...I spent about 4 hours trying to get that B$ to work...

Thank you kindly :)

Just to recap...what settings should I set to ensure that COOKIES are tried first, but URL propagation should be tried secondly???

Cheers ;)

Posted: Sat May 20, 2006 10:14 pm
by alex.barylski
Also...

I don't suppose anyone can tell me if using URL propagation for sessions if it's possible to also session_regenerate_id() to prevent fixation attacks is possible???

I can't seem to get that to work now :(

Cheers :)