Re: [SM-DEVEL] 'You Must Be Logged In...' Bug

[Paul J. T. <cap...@sq...>]

Friggin Fraggin Friggin Fraggin...

Gee wiz. How many times did I try that test out before I sent that
email? Well, immediately after I sent my previous email about my
thoughts with session_start(), SquirrelMail proved me wrong by doing
the whole "You Must Be Logged In" thing again, this time without the
session_start headers being sent appropriately.

This doesn't rule out session_start - just it's header. Guess I will
have to keep looking...

Paul

Paul Joseph Thompson said:
> I am fairly certain that the evil "You Must Be Logged In..." has
> to fo with a PHP bug. Something in the function "session_start".
> In an installation of SM (CVS) that I have that ALWAYS gives me
> "You Must Be Logged In..." on ANY click after logging in, I tried
> something.
>
> I put an echo at the beginning of "right_main" and "left_main"
> (before any includes or anything). The good thing about this is
> that it messes up all headers, etc, from being sent.
>
> And I got this result:
>
> --- RESULT HERE ---
>
>  STOP THE EVIL SESSION LIMITER!
>
>  Warning: Cannot send session cache limiter - headers
>      already sent (output started at /home/thomppj/projects
>      /squirrelmail/squirrelmail/src/right_main.php:15)
>  in ../src/validate.php on line 12
>
>  Warning: Cannot add header information - headers already
>     sent by (output started at /home/thomppj/projects
>     /squirrelmail/squirrelmail/src/right_main.php:15)
>  in ../functions/i18n.php on line 720
>
> --- END RESULT ---
>
> The second header is not to blame - it is just some harmless i18n
> stuff. However, the first header is the result of SOMETHING being
> done by the PHP function session_start() - as being called on
> line 12 of src/validate.php.
>
> PHP is having some kind of issue here. I have another
> installation of SquirrelMail containing the EXCEPT SAME CODE AND
> EVERYTHING on this machine that works. The ONLY DIFFERENCE is
> this:
>
>  /home/web/mail  -> http://.../mail     WORKS
>  /home/web/mail2 -> http://.../mail2    "You Must Be Logged
>  In..."
>
> Oh yes, in case I didn't comment on this, adding the echo into
> the scripts, as mentioned above, stopped the "You Must Be Logged
> In"
> problem.
>
> Woo. Crazy stuff. And then, when I click on some part of
> SquirrelMail where I DID NOT put an echo before the headers are
> sent by
> session_start, I IMMEDIATELY get the "You Must Be Here" problem.
>
> Here is my PHP information from the bug plugin. And before I get
> critisized for using an older version of PHP, keep in mind this
> is a production machine running Debian Stable, so it just happens
> to be a little old...
>
> My browser information:
>  Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; TUCOWS; .NET
>  CLR
> 1.0.3705)
>  get_browser() information (List)
>    * Nothing listed
>
> My web server information:
>  PHP Version 4.0.3pl1
>  PHP Extensions (List)
>    * 0 = gd
>    * 1 = imap
>    * 2 = ldap
>    * 3 = mysql
>    * 4 = zlib
>    * 5 = yp
>    * 6 = sysvshm
>    * 7 = sysvsem
>    * 8 = standard
>    * 9 = sockets
>    * 10 = session
>    * 11 = posix
>    * 12 = pcre
>    * 13 = gettext
>    * 14 = ftp
>    * 15 = filepro
>    * 16 = db
>    * 17 = Calendar
>    * 18 = Session MM
>    * 19 = apache
>
> SquirrelMail-specific information:
>  Version:  1.2.0
>  Plugins (List)
>    * 0 = translate
>    * 1 = new_window
>    * 2 = bug_report
>    * 3 = abook_import_export
>    * 4 = quicksave
>    * 5 = abook_take
>    * 6 = fortune
>    * 7 = newmail
>    * 8 = delete_move_next
>    * 9 = gzip
>    * 10 = filters
>    * 11 = squirrelspell
>    * 12 = sent_subfolders
>
> My IMAP server information:
>  Server type:  cyrus
>  Server info:  * OK [HIDDEN] Cyrus IMAP4 v1.5.19 server ready
>  Cabailities:  IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ NAMESPACE
>  UIDPLUS
> X-NON-HIERARCHICAL-RENAME NO_ATOMIC_RENAME UNSELECT
>
> --
> Paul Joseph Thompson
> cap...@sq...
> AIM/Yahoo/MSN IM: Captain Bunzo
> ICQ Number: 38801719
>
>
>
> --
> squirrelmail-devel mailing list
> List Address: squ...@li...
> List Info:
> https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel
> http://squirrelmail.org/cvs


-- 
Paul Joseph Thompson
cap...@sq...
AIM/Yahoo/MSN IM: Captain Bunzo
ICQ Number: 38801719