[Phplib-commit] cookie doesn't work. User isn't logged in when visiting again
Brought to you by:
nhruby,
richardarcher
From: Bernhard F. <bf...@on...> - 2002-03-20 21:12:50
|
Hi! I am new in this mailing list (in fact, it's my first mailing list :-) ) and I have a problem with an older version of phplib. Users at my website http://www.fatnews.de can login, but although I use cookies in session.inc the user isn't logged in when he returns to my website some days or hours later! What is wrong? Can anybody help me? to secure my files I use this code: <? require("autorlib/domain.inc"); page_open(array("sess" => "Session_autor", "auth" => "Auth_autor")); ?> <p>Hello World</p> <?page_close()?> I use this files: auth.inc, page.inc, session.inc, perms.inc, db_mysql.inc, ct_sql.inc here are my settings in session.inc: ################################################################ var $classname = "Session"; ## Needed for object serialization. ## Define the parameters of your session by either overwriting ## these values or by subclassing session (recommended). var $magic = "dickarsch"; ## Some string you should change. var $mode = "cookie"; ## We propagate session IDs with cookies //var $fallback_mode; ## If this doesn't work, fall back... var $lifetime = 525600; ## 0 = do session cookies, else minutes var $cookie_domain = "fatnews.de"; ## If set, the domain for which the ## session cookie is set. var $gc_time = 525600; ## Purge all session data older than 1440 minutes. var $gc_probability = 1; ## Garbage collect probability in percent var $auto_init = ""; ## Name of the autoinit-File, if any. var $secure_auto_init = 1; ## Set to 0 only, if all pages call ## page_close() guaranteed. var $allowcache = "passive"; ## "passive", "no", "private", "public" var $allowcache_expire = 525600; ## If you allowcache, data expires in this ## many minutes. var $that_class = ""; ## Name of data storage container ## ## End of parameters. ## var $name; ## Session name var $id; ## Unique Session ID var $that; var $pt = array(); ## This Array contains the registered things var $in = false; ## Marker: Did we already include the autoinit file? ################################################################ this are my auth.inc settings: ################################################################ class Auth { var $classname = "Auth"; var $persistent_slots = array("auth"); var $lifetime = 525600; ## Max allowed idle time before ## reauthentication is necessary. ## If set to 0, auth never expires. var $refresh = 0; ## Refresh interval in minutes. ## When expires auth data is refreshed ## from db using auth_refreshlogin() ## method. Set to 0 to disable refresh var $mode = "log"; ## "log" for login only systems, ## "reg" for user self registration var $magic = "sjz2u73zdsz"; ## Used in uniqid() generation var $nobody = false; ## If true, a default auth is created... var $cancel_login = "cancel_login"; ## The name of a button that can be ## used to cancel a login form ## End of user qualifiable settings. var $auth = array(); ## Data array var $in; var $db; ################################################################ |