views:

382

answers:

3

Hi guys,

I've mentioned it on here before, but still have the problem, so have added some extra info :)

We have a local intranet site that everyone on the network uses, maybe 5% (or even less) of the users that use the site have problems where the session isn't stored properly.

I've tried defining a path manually and whereas most users sessions are created and remain just fine, on the effected machines it seems that it either forgets the cookies are there, or it can't read them, and then goes on to create a new cookie almost every time you refresh a page.

Things to note are...

* happens on both the Zend login screen *and* our systems, so for once it's not my dodgy code!
* it only effects <5% of users
* it only happens when using IE
* it only happens with Windows XP or Vista - Windows 2000 works fine!
* it happens to those users on any XP/Vista machine, so I can use my bosses PC and it's fine, but if he uses mine it doesn't work again...

I've tried messing with the security settings in IE too, changing the cookie security to allow all cookies/sessions, but no luck on that either unfortunately :(

I've tried nettool but it didn't really help much unfortunately, since it just showed that the new cookies/sessions were being created, but didn't say why.

I've also tried checking the date and times are on the same on the server as they are on the workstation, and yup everything is set fine.

The name of the server is 'gc-hr01' - not sure if that should effect anything like this.

Any help would be amazing, really stuck on this.

Thanks!

+2  A: 

The session cookie might get refused because of insufficient validity and/or privacy information. Try to make those as specific as possible, for example:

session_set_cookie_params(0, '/path/to/your/php-application', '.www.example.com', false, true);
Gumbo
That's a very good idea thank you - I'll give it a try!
Nick
Ah, no luck unfortunately :( Think we may have to update the server, and switch to apache... not sure if that'd help though :)
Nick
Did you try to add a (fake) compact privacy policy?
Gumbo
Hi Grumbo, apologies for my ignorance but how do I go about that? I did try reading the msdn link but found it slightly overwhelming :(Thanks
Nick
Try this: `header('P3P: CP="CAO PSA OUR"');` See http://support.microsoft.com/kb/323752
Gumbo
A: 

Could it be that 5% of the users have user information that, when retrieved from the cookie, disrupts the proper reading/decoding/parsing of the cookie server-side?

Donnie C
Thanks, but nope I don't think so - it works fine if they use another machine or browser :(
Nick
A: 

HI. I have the same problem too. Do you find out the solution?

My situation is even worst.. not 5%.. but my boss' computer. LOL

http://stackoverflow.com/questions/1533291/php-session-empty-in-one-computer-but-not-another-weird

I believe it is session id problem. the session are not kept the same.

Murvinlai