Re: [phplib] using POST in fall back mode From: Bryan McGuire (joefriday <email protected>)
Date: 07/12/00

Naw, that won't help. He's not talking about clicking on a link but
clicking a submit button in a POST form. He needs to include a hidden
field in his form that has the session id to pass it back to the server for
when the user has cookies turned off.
----- Original Message -----
From: "NickM" <nick <email protected>>
To: "David West" <westd <email protected>>
Cc: <phplib <email protected>>
Sent: Wednesday, July 12, 2000 10:52 AM
Subject: Re: [phplib] using POST in fall back mode

> Did you make sure that EVERY url you print is encapsulated within
> $sess->url($url) otherwise the session id won't be passed on.
>
> So basically every url must be dealt with in the code and put through
this,
> none in the html, at least whereever you need to keep auth that is.
>
> Nick
>
> ----- Original Message -----
> From: "David West" <westd <email protected>>
> To: <phplib <email protected>>
> Sent: Wednesday, July 12, 2000 4:11 PM
> Subject: [phplib] using POST in fall back mode
>
>
> > Hi,
> >
> > I'm using PHPLIB for basic session handling. My problem is thus:
> >
> > I have set the mode to cookie, and fallback mode to GET. What my page
> does
> > is submit a form using the POST method with a user's username and
> password.
> > This then accesses a MySQL database which picks out some information
about
> > the user. I then use $sess->register() to remember this info. This
works
> > fine with cookies turned on, and with GET set as the $mode.
> >
> > However, when I use GET as the fallback mode to cookies, and disable
> cookies
> > in my browser, a problem arises. When the 302 and location headers are
> sent
> > by PHPLIB with the session id as a URL parameter, the original posted
> > username and password do not appear to be resent, and so I can't get the
> > information about the user.
> >
> > Obviously if I change the original form to use GET instead of POST,
it'll
> > work, but I don't want the users password visible in the URL.
> >
> > Any help with this would be greatly appreciated.
> > David West
> >
> > PS. I'm using PHPLIB as a bunch of includes, and I can't change php.ini,
> > etc. I dunno if this is relevant?
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: phplib-unsubscribe <email protected>
> > For additional commands, e-mail: phplib-help <email protected>
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: phplib-unsubscribe <email protected>
> For additional commands, e-mail: phplib-help <email protected>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: phplib-unsubscribe <email protected>
For additional commands, e-mail: phplib-help <email protected>