[Cgi-session-user] FW: CGI::Session

[Sherzod R. <she...@ha...>]

Upgrade to the most recent version and try again. This problem used to
happen to me occasionally in some 3.x versions, but haven't since 4.x
were released.
 
 



-- 
Sherzod Ruzmetov

 <http://www.qvote.net/> http://www.qVote.net/ - Web Polls made Easy,
Affordable and Esthetically appealing 

 



-----Original Message-----
From: DeSimine Family [mailto:des...@co...] 
Sent: Friday, May 25, 2007 6:33 AM
To: she...@cp...; mar...@cp....
Subject: CGI::Sessions




I've been using CGI::Sessions for some time now. It's a great package,
but I had an obscure problem where users credentials were being lost and
they could not log in.

I traced it to the ID driver. Now I'm not sure if this is an issue,
perhaps I'm just using the package incorrectly? 

If  a session is created, then I remove the session file from the server
(because it is old), the client cannot create a new session. They pas
the old CGISESSID and the call to ID::md5->generate_id always returns a
new id. I expected a new session file to be created with the exisitng
CGISESSID. After all, CLAIMED_ID (the existing ID) is passed to
generate_id but ignored.

How is this supposed to be used, I am supposed to update the client's
cookie with a new CGISESSID, even though they already have a session id?

Thanks, 
Rich