tomz
Fri 25 May 2007, 05:00 pm GMT +0200
In relation to the session_handler and the session Starter function (start_session) I noticed some strange behavior as it seem to me. I'm even not sure where to include the session Starter. I've put it on top of session_handler.php instead of session_start().
Now the strange things:
- a session starts (without ses_value) even if the user has put the wrong password.
- if a user session was killed in the session table and the user logout a full user session will be created including ses_vallue.
- if a session with session_start() as usual is called in session_handler.php a cookie will be created and the session will never end.
- if a session with start_session() and the start_session fuction is called in session_handler.php a cookie will be created and the session end at the defined session.gc_maxlifetime in php.ini.
- in that case if the user is loged out automaticaly one more session is created and is cleared not automaticly as I can see. If a user log out and in like this more and more sessions are created but not cleared.
Is that a fault of my usage of the session starter and the session_handler?
Do you notice the same things?
If that is only in my case asI described how do I use the session_handler and the session Starter correctly.
Now the strange things:
- a session starts (without ses_value) even if the user has put the wrong password.
- if a user session was killed in the session table and the user logout a full user session will be created including ses_vallue.
- if a session with session_start() as usual is called in session_handler.php a cookie will be created and the session will never end.
- if a session with start_session() and the start_session fuction is called in session_handler.php a cookie will be created and the session end at the defined session.gc_maxlifetime in php.ini.
- in that case if the user is loged out automaticaly one more session is created and is cleared not automaticly as I can see. If a user log out and in like this more and more sessions are created but not cleared.
Is that a fault of my usage of the session starter and the session_handler?
Do you notice the same things?
If that is only in my case asI described how do I use the session_handler and the session Starter correctly.