Re: [Phplib-users] random logouts

[Nathaniel P. <np...@te...>]

On 4/13/2004 7:50 PM, Layne Weathers wrote :

>[snip]
>
>I have users occasionally losing their session and/or auth and getting the
>login screen. From the bug reports, this happens immediately after login
>about 20-30% of the time. The rest of the time it appears to be random, but
>usually when clicking on a link (as opposed to submitting a form and/or
>being redirected).
>
>[snip]
>
>Has anyone seen this kind of behaviour before?
>  
>
Although I can't be sure without more information, it sounds to me like 
it is an issue with cookies or session/auth lifetimes. If you are using 
the included Challenge-Response auth subclass for example, it has a 
default auth lifetime of only 1 minute, last time I checked.

As for the cookie end of things, make sure that the browsers are 
accepting the cookie (sniffing the HTTP headers can be useful here), and 
make sure that the cookie is being set for the same domain/hostname that 
it is originating from. If you have a situaiton where you want sessions 
to span multiple hosts/domains/subdomains, that will likely cause 
problems as well, which you'd have to work around.

Oh, and just in case... make /absolutely/ sure that each page that uses 
sessions and/or auth is closed with page_close(). The lack of this 
function call at the end of your scripts is often the cause of 
random-looking dropped sessions.

Hope this helps...

-- 
___________________________
Nathaniel Price
http://www.tesserportal.net
Webmaster