Posted by Tom on 04/25/06 10:32

Thank you for the response, fletch. It appears session_regenerate_id
was the culprit. (I thought it was one of the factors I had controlled
for, but apparently never got around to it.) I suppose this might
account for the unexplained script reloading (unless I'm misconstruing
normal HTTP interaction.)

I had read some warnings on session fixation that I thought recommended
using session_regenerate_id systematically as a precaution, but I may
have misunderstood the implementation. I'll have to revisit.

In any event, thanks once more. An immense relief.

Tom

[Back to original message]