php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #35596 Session Variables Lost with Folder Traverse
Submitted: 2005-12-08 09:12 UTC Modified: 2005-12-08 10:55 UTC
Votes:1
Avg. Score:5.0 ± 0.0
Reproduced:1 of 1 (100.0%)
Same Version:1 (100.0%)
Same OS:1 (100.0%)
From: divino dot codino at gmail dot com Assigned:
Status: Not a bug Package: Session related
PHP Version: 4.4.1 OS: Windows 2000
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: divino dot codino at gmail dot com
New email:
PHP Version: OS:

 

 [2005-12-08 09:12 UTC] divino dot codino at gmail dot com
Description:
------------
there is a problem with session variables management on my hosting solution . my hosting solution is runnig under windows 2000 and IIS 5.x and i cannot change the hosting plan at this time , the bug is that my session variables are set when i moves between pages in same folder in which i have set the session but when i travese to a page which is in the subdirectory somehow my session variables are lost and they appear again when i jump to parent directory  .... this problem is only under windows 2000 because i am running windows xp and IIS 6 on my home PC and the session variables are working fine reagrdless of how much i traverse .... can i remove this bug somehow on windows 2000  .... following is the code i am using to check to initialize and check session variables .... my session.cookie_path = / is set and u can vies my php.ini at www.smartqatar.com/test.php

Reproduce code:
---------------
////// to initialize session variables
$row = $db->sql_fetchrow($result);
setcookie("loggedin", "TRUE", time()+(3600 * 24));
setcookie("mysite_username", "$username");
echo "You are now logged in!<br>"; 
session_start();
$_SESSION['username'] = $username;
$_SESSION['password'] = $password;
$_SESSION['fullname'] = $row['fullname'];

///// to chech session variables
   session_start();
   session_cache_limiter('private');
   header("Cache-control: private");
// session variables are not set
   if (isset($_SESSION['username']) && isset($_SESSION['password']))
        {
            $username = $_SESSION['username'] ;
            $password = $_SESSION['password'] ;			}

Expected result:
----------------
session variables should be under windows 2000


Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2005-12-08 09:15 UTC] divino dot codino at gmail dot com
i cannot change my hosting solution so i expect the results to be according to php 4.4.1 and windows 2000 and that i can really get session variables in another folder otherwise i have to dump all files in one folder perhaps
 [2005-12-08 10:55 UTC] tony2001@php.net
Do not file bugs when you have Zend extensions (zend_extension=)
loaded. Examples are Zend Optimizer, Zend Debugger, Turck MM Cache,
APC, Xdebug and ionCube loader.  These extensions often modify engine
behavior which is not related to PHP itself.


 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved.
Last updated: Wed Jul 09 11:01:34 2025 UTC