RE: [PHP] phpbb / sessionid nightmare

2007-05-02 Thread Richard Lynch
On Sat, April 28, 2007 5:51 pm, Brad Sumrall wrote: > I understand where you are going with the mysql injection. > It would appear as though the entire session is being dictated by this > _utmX > session which I have never seen before. > > It would appear as though the /index.php sets this java bas

RE: [PHP] phpbb / sessionid nightmare

2007-05-02 Thread Richard Lynch
> This is a new page. > Think about it as a blank .php page first. > > Now, where would you point me now? > > Brad > > -Original Message- > From: Chris [mailto:[EMAIL PROTECTED] > Sent: Monday, April 30, 2007 12:18 AM > To: Brad Sumrall > Cc: php-general@

RE: [PHP] phpbb / sessionid nightmare

2007-05-02 Thread Richard Lynch
On Sat, April 28, 2007 4:46 pm, Brad Sumrall wrote: > The cookie it's self says > PHPSESSID=26b7974a5d71c7d0bfebbf71750dac7b > Path=/ > Host=www.domain.com > > When I go to the jacked up page, I pickup this one > PHPSESSID=a787e077dd18ed18cb824f664d38315d > Path=/ > Host=domain.com As I recall, it

Re: [PHP] phpbb / sessionid nightmare

2007-04-30 Thread Stut
Brad Sumrall wrote: Does anyone know what this _utma _utmb _utmc _utmz stuff is? Obviously it is not a php standard. Obviously it is what is actually controlling my sessions? These come from Google services (analytics, adsense, etc), they have nothing to do with your sessions. -Stut -- PHP

RE: [PHP] phpbb / sessionid nightmare

2007-04-29 Thread Brad Sumrall
-general@lists.php.net Subject: Re: [PHP] phpbb / sessionid nightmare Brad Sumrall wrote: > The cookie domain in phpbb is already set at ./domain.com I doubt it's set to ./domain.com What about your session (ie NOT phpbb) ? -- Postgresql & php tutorials http://www.designmagick.com/ --

RE: [PHP] phpbb / sessionid nightmare

2007-04-29 Thread Brad Sumrall
Sumrall Cc: php-general@lists.php.net Subject: Re: [PHP] phpbb / sessionid nightmare Brad Sumrall wrote: > The cookie domain in phpbb is already set at ./domain.com I doubt it's set to ./domain.com What about your session (ie NOT phpbb) ? -- Postgresql & php tutorials http://www.desi

RE: [PHP] phpbb / sessionid nightmare

2007-04-29 Thread Brad Sumrall
, April 30, 2007 12:18 AM To: Brad Sumrall Cc: php-general@lists.php.net Subject: Re: [PHP] phpbb / sessionid nightmare Brad Sumrall wrote: > The cookie domain in phpbb is already set at ./domain.com I doubt it's set to ./domain.com What about your session (ie NOT phpbb) ? -- Postgres

Re: [PHP] phpbb / sessionid nightmare

2007-04-29 Thread Chris
Brad Sumrall wrote: The cookie domain in phpbb is already set at ./domain.com I doubt it's set to ./domain.com What about your session (ie NOT phpbb) ? -- Postgresql & php tutorials http://www.designmagick.com/ -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://w

RE: [PHP] phpbb / sessionid nightmare

2007-04-29 Thread Brad Sumrall
Subject: Re: [PHP] phpbb / sessionid nightmare Brad Sumrall wrote: > The cookie it's self says > PHPSESSID=26b7974a5d71c7d0bfebbf71750dac7b > Path=/ > Host=www.domain.com > > When I go to the jacked up page, I pickup this one > PHPSESSID=a787e077dd18ed18cb824f

RE: [PHP] phpbb / sessionid nightmare

2007-04-29 Thread Brad Sumrall
PROTECTED] Sent: Sunday, April 29, 2007 6:45 PM To: Brad Sumrall Cc: [EMAIL PROTECTED]; php-general@lists.php.net Subject: Re: [PHP] phpbb / sessionid nightmare Brad Sumrall wrote: > The cookie it's self says > PHPSESSID=26b7974a5d71c7d0bfebbf71750dac7b > Path=/ > Host=www.domain.c

Re: [PHP] phpbb / sessionid nightmare

2007-04-29 Thread Chris
Brad Sumrall wrote: The cookie it's self says PHPSESSID=26b7974a5d71c7d0bfebbf71750dac7b Path=/ Host=www.domain.com When I go to the jacked up page, I pickup this one PHPSESSID=a787e077dd18ed18cb824f664d38315d Path=/ Host=domain.com That will be your problem. A cookie created on domain.com is

RE: [PHP] phpbb / sessionid nightmare

2007-04-28 Thread Brad Sumrall
I mean, the get forum Brad -Original Message- From: Brad Sumrall [mailto:[EMAIL PROTECTED] Sent: Saturday, April 28, 2007 7:02 PM To: [EMAIL PROTECTED] Cc: php-general@lists.php.net Subject: RE: [PHP] phpbb / sessionid nightmare Oops! Maybe not. You were right! SFC = stupid flippn

RE: [PHP] phpbb / sessionid nightmare

2007-04-28 Thread Brad Sumrall
t for now, just trying to get it to work! Thanks, Brad -Original Message- From: Richard Lynch [mailto:[EMAIL PROTECTED] Sent: Saturday, April 28, 2007 3:43 PM To: Brad Sumrall Cc: php-general@lists.php.net Subject: Re: [PHP] phpbb / sessionid nightmare On Sat, April 28, 2007 11:03 am, Bra

RE: [PHP] phpbb / sessionid nightmare

2007-04-28 Thread Brad Sumrall
I understand where you are going with the mysql injection. It would appear as though the entire session is being dictated by this _utmX session which I have never seen before. It would appear as though the /index.php sets this java bases session variable and since phpbb does not use this, it neve

RE: [PHP] phpbb / sessionid nightmare

2007-04-28 Thread Brad Sumrall
: 'Tijnema !'; php-general@lists.php.net Subject: RE: [PHP] phpbb / sessionid nightmare On Sat, April 28, 2007 12:47 pm, Brad Sumrall wrote: > which sessionid call on that crazy page is kicking out the original > sessionid and asking for a new one. That's when an experienced progr

RE: [PHP] phpbb / sessionid nightmare

2007-04-28 Thread Brad Sumrall
neral@lists.php.net Subject: Re: [PHP] phpbb / sessionid nightmare On Sat, April 28, 2007 11:03 am, Brad Sumrall wrote: > Users log into web site in a sudo phpbb login which works fine. > > Users are able to browse around phpbb and a sudo phpbb program called > photopost. > > > > B

RE: [PHP] phpbb / sessionid nightmare

2007-04-28 Thread Richard Lynch
On Sat, April 28, 2007 12:47 pm, Brad Sumrall wrote: > which sessionid call on that crazy page is kicking out the original > sessionid and asking for a new one. That's when an experienced programmer KNOWS that it's time to re-factor and re-write the page. :-) > I am lost in the sauce on this one

Re: [PHP] phpbb / sessionid nightmare

2007-04-28 Thread Richard Lynch
On Sat, April 28, 2007 11:03 am, Brad Sumrall wrote: > Users log into web site in a sudo phpbb login which works fine. > > Users are able to browse around phpbb and a sudo phpbb program called > photopost. > > > > But when the goto a differen't part of the site which is not phpbb > related, > the s

RE: [PHP] phpbb / sessionid nightmare

2007-04-28 Thread Brad Sumrall
preventing it from looking for the cookie! Sincerely, Brad [EMAIL PROTECTED] -Original Message- From: Tijnema ! [mailto:[EMAIL PROTECTED] Sent: Saturday, April 28, 2007 12:11 PM To: Brad Sumrall Cc: php-general@lists.php.net Subject: Re: [PHP] phpbb / sessionid nightmare On 4/28/07, Brad

Re: [PHP] phpbb / sessionid nightmare

2007-04-28 Thread Tijnema !
On 4/28/07, Brad Sumrall <[EMAIL PROTECTED]> wrote: Users log into web site in a sudo phpbb login which works fine. Users are able to browse around phpbb and a sudo phpbb program called photopost. But when the goto a differen't part of the site which is not phpbb related, the sessionid does n