Different session id in secure page

[grovemedia]

I'm kinda new to php and I have session_start(); on a page and when I go to a secure page and use session_start(); it produces a new session id. Is there a way not to produce a new session id? Any help will be appreciated. Thanks.

 

[sleipnir214]

Are the domain names of the secure an non-secure sites the same?


Want the best answers? Ask the best questions!

TANSTAAFL!!

 

[grovemedia]

Yeah, they are on the same domain.

 

[sleipnir214]

Create a script which consists entirely of:

<?php
phpinfo();
?>

and look at the output of the script both through secure and non-secure connections. Are there differences in the "session" sections of the two outputs?


Want the best answers? Ask the best questions!

TANSTAAFL!!

 

[grovemedia]

No, the two sections have the same outputs.

 

[sleipnir214]

What version of what browser are you using?


Want the best answers? Ask the best questions!

TANSTAAFL!!

 

[sleipnir214]

And if you use another brand of browser, does the problem still occur?


Want the best answers? Ask the best questions!

TANSTAAFL!!

 

[grovemedia]

I'm on a Mac and I tried both Safari 2.0 and Firefox 1.0.4

 

[sleipnir214]

I assume that sessions work fine within the http:// part of your site and also within the https:// part of your site, but not across the boundary between those two sites, right?

What version of PHP are you running? On that platform with what web server? Are you running PHP as a web server module or as as standalone CGI interpreter?


Want the best answers? Ask the best questions!

TANSTAAFL!!

 

[grovemedia]

Yes.

PHP v5.0.4. Web server is Apache v1.3.33. Running PHP as a web server module.

 

[sleipnir214]

Hmm.

I'm running PHP on a LAMP (FC3/2.0.53/4.1/5.0.4) box and hitting my test pages with Opera 8.0, IE 6.0.2900 and Firefox 1.0.4.

Unfortunately, I can't duplicate your error.


Are you transmitting your session IDs in the URL or in a cookie?




Want the best answers? Ask the best questions!

TANSTAAFL!!

 

[grovemedia]

I wasn't transmitting the id in the url but I am now because thats the only way I can get the session id to the secure page. Thanks for your help with this.