PHP - Session Hijacking Problem

I'm writing a shopping cart type of application for booking something. The cart will holds items as arrays in the session. The problem i'm i'm having is i can store 5 items in my cart and then once i try to store any more, it just won't. I'm not getting any php errors. I'm using the codeigniter framework, so it may be a codeigniter session storage problem. Hopefully you guys can look at it and can see if you spot any bad logic that i'm overlooking.

Code: [Select]
<?php
                 //generates random unique 32 character string
$booking_hash = random_string('unique');

//set items foreach night
foreach($room['date_rate'] as $date => $rate)
{
                        //produces random sha1 16 char length string
$sha1 = random_string('sha1', 16);

$session['items'][$sha1] = array(
'code'       => $room['code'],
'id'         => $room_id,
'title'      => $room['title'],
'date'       => date("n/j/Y",strtotime($date)),
'price'      => $rate,
'tax_one'    => money_format('%i',$room['tax_one'] * $rate),
'tax_two'    => money_format('%i',$room['tax_two'] * $rate),
'sales_tax'  => 0,
'guests'     => $num_guests,
'booking'    => $booking_hash,
'deposit'    => $deposit,
);
}


$existing_items = $this->session->userdata('items');

   if(!empty($existing_items))
  {
$session['items'] = $existing_items + $session['items'];
    }
 
$this->session->set_userdata($session);


?>
I just read some codeigniter session documentation. It says the cookie it's using can hold 4KB of data. I have no idea how much text 4KB can hold...

I'm using xampp and am trying to create a login session...these are the my php files
login.php
Code: [Select]
<form action='login1.php' method='post'>
Email: <input type='text' name='id'></br>
Pass : <input type='password' name='pass'></br>
<input type='submit' name='login' value='login'>
login1.php
Code: [Select]
<?php
$id=$_POST['id'];
$pass=$_POST['pass'];

$conn=mysql_connect("localhost","root","");
if (!$conn)
{
die('Could not connect: ' . mysql_error());
}


$e=mysql_select_db('test', $conn);
if(!$e)
{
die(''.mysql_error());
}
else
{
echo 'database selected successfully';
}

$sql=mysql_query("Select email,password from login where email='$id' AND password='$pass'");
$count=mysql_num_rows($sql);
if($count==1) 
{ 
    session_start();
    
    echo "</br>Login Successful</br>";
echo "Please wait 5 seconds ";
/* redirct to the specified page */
header("refresh:5;url=empty.php");
}
else
{

echo "please try to login again</br>";
echo "you will be redirected to the login page in 5 seconds";
     /* redirct to the specified page */
header("refresh:5;url=login.php");
}
mysql_close();
?>
empty.php
Code: [Select]
<?php
session_start();

$logi=$_SESSION['id'];
echo 'welcome '.$logi;



?>

empty.php is supposed to display the email id from login.php
I checked it about an hour ago and it was working fine but now it gives me an error
Undefined index: id in C:\xampp\htdocs\littleprogress\empty.php on line 4
I didn't change anything after checking it. only cleared the history and cookies of my firefox browser
what could be the problem

Hi guys.

Im making a script that stores different contents in sessions. And everything seems to be working fine. I previously had some problems with it, but managed to fix them. Now somehow a new problem have accrued for me. I did not do anything to it since it last worked. So i am a little confused. It keeps telling me that the session does not have any content.

I think that the problem is within these two files he

http://pastebin.com/T6sfzjWn

and

http://pastebin.com/BUAuFp6t

It keeps giving me the error on line 24 from the second file.

Can someone please help me and say what i am doing wrong?

Hi,
I"m trying to make an external link to a web page. Them problem is that when my user clicks on the link they are taken to the destination web page, but they see an error "Your session has expired". At that point, they must either refresh the browser or exit out and click again in order to see the page.
My question is, how can I go around this problem in my code? If at all possible, I like to be able to add something to the URL so that this does not happen. Any help or guidance is appreciated.

Hello Everyone!

I have 2 problems with sessions that I'd like some assistance with.
1. The session often ends after clicking any link after logging in. (sometimes it remains alive, and in those cases it stays alive until browser is closed.)
2. The function that should start a session if a cookie is found (and correct) is not working, so if the browser is closed and re-opened the session won't start the session.

I'll include the code that I think is relevant. The odd part is that these problems occur in every browser, I have tried multiple tutorials (so different scripts) to creating a login form but somehow the same result appears every time.

function login($username, $password, $remember = false) 
{


    $sql = mysql_query("SELECT * FROM users WHERE password = '" . md5($password) . "' AND username = '" . $username . "' LIMIT 1");
    // If there are no matches then the username and password do not match
    if($sql === false) 
    {
        return false;
    }
    else
    {
        while($u = mysql_fetch_array($sql))
        { 
                
                // Check if user wants account to be saved in cookie
                if($remember == true)
                {
                    // Generate new auth key for each log in (so old auth key can not be used multiple times in case 
                    // of cookie hijacking)
                    $cookie_auth= rand_string(10) . $username;
                    $auth_key = session_encrypt($cookie_auth);
                    $auth_query = mysql_query("UPDATE users SET auth_key = '" . $auth_key . "' WHERE username = '" . $username . "'");
 
                    setcookie("auth_key", $auth_key, time() + 60 * 60 * 24 * 7, "/", "mycorrectwebsite.com", false, true);
                }
                // Assign variables to session
                session_regenerate_id(true);
                $session_id = $u[id];
                $session_username = $username;
                $session_level = $u[user_level];
 
                $_SESSION['user_id'] = $session_id;
                $_SESSION['user_level'] = $session_level;
                $_SESSION['user_name'] = $session_username;
                $_SESSION['user_lastactive'] = time();
return true;
        }
    }
} 

function initiate()
{
$logged_in = false;
if(isset($_SESSION['user_name']))
{
$logged_in = true;
}
 
        // Check that cookie is set
        if(isset($_COOKIE['auth_key']))
        {
            $auth_key = $_COOKIE['auth_key'];
 
            if($logged_in === false)
            {
                // Select user from database where auth key matches (auth keys are unique)
                $auth_key_query = mysql_query("SELECT username, password FROM users WHERE auth_key = '" . $auth_key . "' LIMIT 1");
                if($auth_key_query === false)
                {
                    // If auth key does not belong to a user delete the cookie
                    setcookie("auth_key", "", time() - 3600);
                }
                else
                {
                    while($u = mysql_fetch_array($auth_key_query))
                    {
                        // Go ahead and log in
                        login($u['username'], $u['password'], true);
                    }
                }
            }
            else
            {
                setcookie("auth_key", "", time() - 3600);
            }
        }
 
}


And then in the header I start every page with:


<?php 
session_start();
include("connect.php");
include("functions.php");
include("actions.php");

initiate();
 ?>

I have this error, and I cann't find soluiton:
Code: [Select]
Notice: Undefined index: ime in C:\wamp\www\web\login_public.php on line 26

Notice: Undefined index: ime in C:\wamp\www\web\login_public.php on line 27
This is the code:
Code: [Select]
<?php require_once("public/includes/session.php"); ?>
<?php require_once("public/includes/connection.php"); ?>

<?php  

if(!$_POST['submit']){
header('refresh:0; url=index.php');}
else {
$korisnik = $_POST['korisnicko_ime']; 
$lozinka = $_POST['lozinka'];
$lozinka_db = sha1($lozinka);

if ($korisnik && $lozinka){
$query = mysql_query("SELECT * FROM korisnik WHERE korisnicko_ime = '$korisnik' ");
$numrow = mysql_num_rows($query);

if($numrow != 0){

while ($row = mysql_fetch_assoc($query)){
$korisnik_db = $row['korisnicko_ime'];
$db_lozinka = $row['lozinka'];
$ime = $row['ime'];
}
if ($korisnik == $korisnik_db && $lozinka_db == $db_lozinka){
echo "Uspesno ste ulogovani";
$_SESSION['ime'] == $ime;
echo $_SESSION['ime'];
}
else { echo "Lozinka je netacna"; }
} else {die("Korisnik ne postoji");}
}
}

?>
What seems to be the problem 

This is my first post here. G'day everyone. I'm having trouble with getting a session recognized from one page to another. I did a search and used the advice but I'm still having trouble.

I have a page called checklogin.php that processes the information submitted for a member to login, and redirect it to login_success.php if the login was successful.
The problem I have is when I test the session in the second page it tells me there is no session. Here's my code (I omitted the db connection code):

Code: [Select]
<?php
// username and password sent from form 
$myusername=$_POST['user']; 
$mypassword=$_POST['pass'];
?>

<?
// Mysql_num_row is counting table row
$count=mysql_num_rows($result);
// If result matched $myusername and $mypassword, table row must be 1 row

if($count==1){
// Register $myusername, $mypassword and redirect to file "login_success.php"

$_SESSION['myusername']=$myusername;
$_SESSION['mypassword']=$mypassword;
header("location:login_success.php");

}
else {
echo "Wrong Username or Password";
}
?>


after I am redirected to login_success.php:

Code: [Select]

<?php
session_start();
$_SESSION['myusername'];

if (isset($_SESSION['myusername']))
{
$loggedin = TRUE;
return $loggedin;
echo "logged in.";

}
else
echo "not logged in";
?>

It echoes "not logged in". I've struggled with this for days and I don't know what's wrong. Thanks in advance.

Hi Guys,

I am developer and relatively new to php although I have written a few scripts. I have a site which runs on linux/unix platform.

I am facing a weird problem:

- I have a php script (e.g. site.com/test/test.php) which takes a input from url, and creates a session and opens a wordpress php in another folder (e.g. site.com/wp/index.php)
- I wrote a small php code in that wp/index.php which checks if session exists or not. if yes, then no problem, if not then die and show a message.

Now the problem is when I run the script, it opens the wp/index.php and the page opens. Good. But when I click on any link in that page e.g about or so, then I get message which I wrote that session not found and so on...

I don't know why this is happening.

So if you guys can help me with this it would be great. Alternatively, I thought if I protect the wp folder (using protect folder thru cpanel) and write a php script outside which call the php inside the wp folder with a hardcoded uname & pw, then i can run the php inside without anyone knowing what the actual uname or pw is. This way if a user directly tries to access it , he wont be able to do so as uname & password box will appear.

But I dunno how to call a php inside protected folder. I tried to redirect but the uname & pw box appeared.

I would be grateful if anyone can help me.

Thanks a lot,

Cheers,
GR

For a while now I've been getting intermittent problems with PHP either slowing down or very occasionally timing out for no apparent reason. For the first time it's happened a number of times today and there is an error message in the logs:

PHP Fatal error:  Maximum execution time of 30 seconds exceeded in functions.php on line 4, referer:search.php

The odd thing is that line 4 of functions.php only contains: $sess = session_id();

I've never had a problem with PHP that digging around in this forum hasn't solved but this one has me stumped.

Anyone got any ideas?

TIA

Hi,
I my first problem is hashing passwords to md5.
My second problem is defining session on value from db.
There is my code but not working.
Code: [Select]
mysql_connect("$host", "$username", "$password")or die("cannot connect");
mysql_select_db("$db_name")or die("cannot select DB");

 
$username=$_POST['username'];
$password=$_POST['password'];
$hash = md5($password);


$username = stripslashes($username);
$password = stripslashes($password);
$username = mysql_real_escape_string($username);
$password = mysql_real_escape_string($password);

$sql="SELECT * FROM $tbl_name WHERE where username = '$username' and password = '$hash'";
$result=mysql_query($sql);

$count=mysql_num_rows($result);

if($count==1){
$sql2="SELECT access FROM $tbl_name WHERE username='$username' and password='$password'";
$access=mysql_query("$sql2");
session_register("username");
session_register("password");
session_register("access");
$_SESSION["access"]=$access;
header("location:success.php");
}
else {
echo "Invalid Username or Password";Thanks for any answers.

i have a login script im using
 if someone landed accidentally on  a page i want him to be redirected and not have access

Code: [Select]
<?php
if (isset($session->logged_in)){

}
else{header("Location: ../index.php");}


?>

Hi guys.

This is my first post here, so excuse me if i am posting this in the wrong forums.
I am making a website, and having a huge problem.

The script is used for orders of different services. And i am using sessions to store the information through serveral pages.
But my problem is that on my final page, where the script sends an email with i can not get it to view the contents of one session.
I am using the same session on a different page and it works like a charm. When i try debugging the session it won't print the contents, so i am guessing something is very wrong?

My code of the page is bellow, let me know if you need anything else:
http://pastebin.com/YHh3bGWS

Please help me 

Hi Guys,        Here is the code, once logged in using known credentials it should display the content "welcome..." but it doesn't, instead it is showing "you are not authorized..." as if the session['username']); isn't being taken? 

<?php 	
ini_set('display_errors',1); 
 error_reporting(E_ALL);
		

		

include_once 'includes/db_connect.php';
include_once 'includes/functions.php';
 
sec_session_start();
?>
<!DOCTYPE html>
<html>
    <head>
        <meta charset="UTF-8">
        <title>Secure Login: Protected Page</title>
        <link rel="stylesheet" href="styles/main.css" />
    </head>
    <body>
        <?php if (login_check($mysqli) == true) : ?>
            <p>Welcome <?php echo htmlentities($_SESSION['username']); ?>!</p>
            <p>
                This is an example protected page.  To access this page, users
                must be logged in.  At some stage, we'll also check the role of
                the user, so pages will be able to determine the type of user
                authorised to access the page.
            </p>
            <p>Return to <a href="index.php">login page</a></p>
        <?php else : ?>
            <p>
                <span class="error">You are not authorized to access this page.</span> Please <a href="index.php">login or register</a>.
            </p>
        <?php endif; ?>
        
    </body>
</html>

I am using WAMP and have made sure the username and password is in the database correctly, how do i debug this?    the error reporting has been switched on but it doesn't help me    is the problem with: 

 <?php if (login_check($mysqli) == true) : ?>

I am trying to follow this guide: http://www.wikihow.c...n-PHP-and-MySQL   Please could i get some help on how to make the login "detect" the username from my MySQL database and display the username   Thanks   Attached Files  login_success.php.jpg   14.31KB   0 downloads

Hi. I have to check if a session is started or not, and then, check for the rank of the user. For that i use two functions like is_administrator,etc.

Well, but this isnt working. I cant get any clear way to know if a session have been already started or not.
Code: [Select]
function is_administrator() {
session_start();
if (isset($_SESSION['usr']) and empty($_SESSION['usr'])) {

$l = conect();
$user = $_SESSION['usr'];
$cons = "SELECT * FROM `users` WHERE usr='" . $user . '\';';
$res = mysql_query ($cons,$l);
$ob = mysql_fetch_array($res);

if ($ob['tipo'] == 'A') {
return true;
}

}
return false;
}

What i want to do is to check if a sesion exist, if not, return false. If the sesion exist, check for the user rank and return true/false.

I'm trying to use a boolean 'true' or 'false' to tell the page that when false, he/she is logged out and send them to loggin page..other wise display the name which is taken from the session....i made the session stuff in a class and i have it as follows:

Code: [Select]
<?php
include("includes/functions.php");

class Session{
    
    public $logged_in = false; // the one i'm on about
    public $key;
    
    // $_session[$key] = $value
    public function set($key, $value){//setting session
$_SESSION[$key] = $value;
if(isset($_SESSION[$key])){
    $this->logged_in = true;
}
    }
    
    public function get($key){ //getting session
if(isset($_SESSION[$key])){
    return $_SESSION[$key];
}
else{
    return false;
}
    }
    
    
    public function confirm_logged_in(){ //check if logged in
        if(!$this->logged_in)
redirect_to("login.php"); // a tailored method
    }
    
    public function logout(){ 
session_start();
session_unset();
session_destroy();
$this->logged_in = false; 
    }
}
$session = new Session();
?>
unfortunately when i set the session on one page (say after login) assuming that the $logged_in variable is now turned to TRUE, but when I go to another page (e.g. Index.php)  and Get the allready set session and perform the test confirm_logged_in() it does the OPPOSITE to what I would expect as for example: redirecting me to login.php even when its "supposed to be"  $logged_in=true as set in the set function above.

any help would be appreciated...suggestions to change syntax or any as such...thanks