|
|
Posted by Steve on 10/26/06 13:27
"Mike" <mike@mjfcadsolutions.co.uk> wrote in message
news:1161674404.060608.106100@m7g2000cwm.googlegroups.com...
| I've been having loads of problems with AOL users and finally come to
| the conclusion that if a user has an AOL browser, session data is lost
| as soon as they move to the next page.
|
| I have not yet found a solution to this so to avoid losing business
| from any AOL user it looks like I may have to re-write script so not to
| use sessions.
|
| One way I thought was when a user logs in, a random string, similar to
| a session id (can't use the session id because AOL browsers can change
| it from page to page) is stored to a database with a reference to that
| user. This unique id is passed from page to page in the URL.
|
| Then on everypage, the id in the URL is checked against the database
| and if exists, that user must be logged in and their data can be
| retrieved.
|
| Any thoughts on this process?
have you made SURE your session variables are stored in a FILE and NOT as a
COOKIE? php will re-write your html output and put a variable called
PHPSESSID in it. the value of the variable is the name of the session file
on YOUR server's hard drive. AOL has nothing to do with ANY of that...it is
all controlled by your server and php.
were i you, i'd sign up for a AOL trial membership and debug your setup
until you got this sorted out.
and btw, your unique id idea (if the id relates to a login) opens you up
COMPLETELY to security hacks. however, that is EXACTLY what php is doing
with the PHPSESSID. difference is, the id does NOT relate to anything but a
file name rather than login information. you could do as you suggest and use
your id as a key to look up info in a table that stored variables...such as
username and password submitted, etc. otoh, why mimic what php ALREADY
provides. further, provides in a way that allows for cleanup and other
garbage collection goodies that you probably haven't even begun to think
about.
just my 0.02 usd
Navigation:
[Reply to this message]
|