Re: [Phplib-users] falback_mode and session4

[Giancarlo P. <gia...@na...>]

Maxim Derkachev wrote:
> 
> Hello Giancarlo,
> 
> Wednesday, June 05, 2002, 12:08:44 AM, you wrote:
> GP> if cookies are disabled, and there's no session in the URL, it seems
> GP> PHP4 session  will not generate a new session and append anything to the
> GP> hyperlinks or the URL, both with trans_sid enabled or disabled. That's a
> GP> way different from phplib behavior.
> GP> In practice, with php4 session, there's no fallback_mode. Get
> GP> mode(session.use_cookies=0 and cookies disabled) only works if the user
> GP> provides session in the url (which is bad!), otherwise there's no
> GP> generation of sid whithout cookies. Am I right?
> 
> I suppose you're wrong. If the PHP4 session is started and trans-sid is active,
> SID is automatically appended to the urls. In Session4, when trans-sid
> is disabled, url() and purl() are used to append SID. By the way, SID
> is only defined when there's no cookie yet.
> If there's no session cookie (named by session_name() or session.name parameter
> in php.ini), but there is a get variable with the same name as the
> session name, PHP assumes that cookies are disabled, quit setting
> cookies and rely on GET.

The tests I am doing are with cookies cleaned and enabled, and SID
provided in URL.

php 4.06 gets the SID from the URL, but leaves a cookie and keeps on
relying on that

php 4.2.1 gets the sid from the URL, leaves no cookie and keeps relying
on the SID in url.

This beahviour is the same with either trans_sid 0 or 1.
The php.ini are the same for both. 
I am not checking the url rewriting at the moment, too many tests (but
on one occcasion I saw double SID in URL, can't tell you more, sorry), I
am testing just the mode behaviour.

> If PHP see a cookie with the session's name,
> it does not define SID and rely on cookies.
> This is just the same thing as fallback mode in PHPlib, but
> implemented without url(), purl() and the first redirect.
> 

You are right. Excuse me, but I am running quite a lot of parallel
tests, with both php 4.06 and 4.2.1, and many variations of the php.ini
settings and phplib settings.

Apart from the absence in the location URL of the SID, that only affects
reload button, everything is as phplib was. 


Giancarlo