[gray]

anyone had any experience with getting a site which uses php sessions to validate? mine keeps failing whenever the session is called on a link etc

[oli]

Had this exact problem today, not found a solution yet - will keep you posted.

[gray]

cheers man, i'll keep looking

[Stickman]

What happens if you try to force the block element in after opening the form?

Something like:

PHP Code:

echo "<form><fieldset>"; 


Where would the input with the session id be?

[smallbeer]

Oli I thought the stick had sorted this in the other thread?

I realised that all the times it's happened to me is when I've been too lazy to style a fieldset and have just used another block level element instead.

wrapping everything in a fieldset (as you should) solves it, or seems to.

[oli]

No, Ive stuck the fieldsets in but the php is putting the input - hidden - session id bit in before the fieldset tag and I cant find where in the script its coming from.

[smallbeer]

just checked properly and yeah, still fucked. stick and mik aren't that geat then did you write that?

[smallbeer]

right, been speaking to a man who can and he said do this

Choose your poison:

 php.ini:
url_rewriter.tags = "a=href,area=href,frame=src,input=src,form=fakeentry"

url_rewriter.tags = "a=href,area=href,frame=src,input=src,fieldset=fakeentry"

Or in a .htaccess
php_value url_rewriter_tags "a=href,area=href,frame=src,input=src,fieldset=fakeentry"

there shouldn't be spaces between fake and entry - no matter what I do the forum puts them there.

but (and he hasn't got back to me yet) that didn't seem to work for me.

Goggled, and found this that did though.

in a .htaccess

<IfModule mod_php4.c>

php_flag session.use_trans_sid off

</IfModule>

[smallbeer]

Originally Posted by the man who can

It'll work if you use url_rewriter.tags instead of url_rewriter_tags

Turning off trans_sid will work too, but then you don't have the SID fallback for cookieless browsers (although I've never liked putting the SID in the urls in terms of security or neatness).

so basically the first .htaccess example will work minus the typing error.

the rest could be swahili for all I understood.

[oli]

not a monkeys Im afraid, gonna find it if it kills me.

[oli]

Well what do you know,

<IfModule mod_php4.c>

php_flag session.use_trans_sid off

</IfModule>

Stuck that in and its all good, cheers beers