PHP - Session And Cookie Problem

I don't know why but I'm failing hard at GoogleFu today. I can't find a tutorial on how to store a session id in a cookie and then call it on the server. session_id says it replaces the cookie it makes if you set the id via session_id, even if it's the same id...but I'm not sure if that really matters.

Can anyone help point me in the right direction to a good tutorial/give me some insight on this subject? I want to store the session id in a cookie to keep a user logged in for 2 weeks or so (unless they log out of course).

I did find some tutorials on how to re-route the session handlers for open/close/read/write session functions which allow me to store the session in a database. Is this what I want?

Sorry for the newbie question,

Thanks,
Justin

Hi, I am just recently getting this error message:Warning: session_start() [function.session-start]: Cannot send session cookie - headers already sent by (output started at /home/XXX/chordsandguitar.com/index.php:46) in /home/jchords/chordsandguitar.com/index.php on line 48

this is no doubt related to the fact that my site has been hacked along with 1000's of others that are on dreamhost. I don't know if it's related to php file permissions some of my files may have had had their permission set for read-write when they should not have been. They have all been changed to the more restrictive 755 or 644.

So here is how I am using the session_start to store some variables:

Code: [Select]

session_start();

if (!isset($_SESSION["count"]))
{
$_SESSION["count"]=0;
}
else
$_SESSION["count"]++;

if ($_SESSION["count"] == 0)
{
$scale_menu = 'C';
$variation_menu = 'maj';
$code_id = '1';
}
else
{
//allows retreiving the value of the drop-downs after the Select button has been pushed
// has to be skipped on the first access or overwrites starting vars. to null
if (isset($_GET['s_menu']))
$scale_menu = $_GET['s_menu'];
else
$scale_menu = $_GET['scale_menu'];
}


So any ideas why I am getting this error?

Thanks,

Jacques

Hi to everyone, I'm new to the forum and I'm posting here because I ended up in a logical problem for my next script development. I need to get some data of external websites (with vbulletin board), perfectly legal. Using file_get_contents i can print the page content on my server and then use jquery's powerful selectors to get my data.   The problem is that these data are shown only to logged in users so i would need this script (maybe using cURL?) to either login to the external website and then persists the connection or maybe if the user who is executing my script is already logged in that website then use his login? (most likely impossible I think..)   This is my code so far (found on some sites and merged into this)

$data = array('vb_login_username' => 'Scanu', 'vb_login_password' => 'grgfgrgrfbtgbt');
$ch = curl_init(); 
curl_setopt($ch,    CURLOPT_URL,            "http://www.vbulletin.org/forum/login.php?do=login"); 
curl_setopt($ch,    CURLOPT_AUTOREFERER,         true); 
curl_setopt($ch,    CURLOPT_COOKIESESSION,         true); 
curl_setopt($ch,    CURLOPT_FAILONERROR,         false); 
curl_setopt($ch,    CURLOPT_FOLLOWLOCATION,        false); 
curl_setopt($ch,    CURLOPT_FRESH_CONNECT,         true); 
curl_setopt($ch,    CURLOPT_HEADER,             true); 
curl_setopt($ch,    CURLOPT_POST,                 true); 
curl_setopt($ch,    CURLOPT_RETURNTRANSFER,        true); 
curl_setopt($ch,    CURLOPT_CONNECTTIMEOUT,     30); 
curl_setopt($ch,    CURLOPT_POSTFIELDS,         $data); 
$result = curl_exec($ch); 
curl_close($ch);


$pattern = "#Set-Cookie: (.*?; path=.*?;.*?)\n#"; 
preg_match_all($pattern, $result, $matches); 
array_shift($matches); 
$cookie = implode("\n", $matches[0]); 


$ch = curl_init(); 
curl_setopt($ch,    CURLOPT_URL,            "http://www.vbulletin.org/forum/"); 
curl_setopt($ch,    CURLOPT_COOKIE,                $cookie); 
curl_setopt($ch,    CURLOPT_AUTOREFERER,         true); 
curl_setopt($ch,    CURLOPT_COOKIESESSION,         true); 
curl_setopt($ch,    CURLOPT_FAILONERROR,         false); 
curl_setopt($ch,    CURLOPT_FOLLOWLOCATION,        false); 
curl_setopt($ch,    CURLOPT_FRESH_CONNECT,         true); 
curl_setopt($ch,    CURLOPT_HEADER,             false); 
curl_setopt($ch,    CURLOPT_POST,                 false); 
curl_setopt($ch,    CURLOPT_RETURNTRANSFER,        true); 
curl_setopt($ch,    CURLOPT_CONNECTTIMEOUT,     30); 
$result = curl_exec($ch); 
curl_close($ch);
echo $result;
?>

It just shows the same page for unregistered users. Any help or advice is appreciated, i'm very new to this type of script..

I am confused why I am getting the following error and was wondering if I could get a 2nd pair of eyes..
error:
[29-Jul-2010 20:58:01] PHP Warning:  session_start() [<a href='function.session-start'>function.session-start</a>]: Cannot send session cookie - headers already sent in /home/curren11/public_html/mysite***.com/file_monitor.php on line 2
[29-Jul-2010 20:58:01] PHP Warning:  session_start() [<a href='function.session-start'>function.session-start</a>]: Cannot send session cache limiter - headers already sent (output started at /home/curren11/public_html/mysite***.com/file_monitor.php:2) in /home/curren11/public_html/mysite***.com/file_monitor.php on line 2

Here is the code:
<?php
session_start();

$root_path = realpath(getcwd());
$error_monitor_file = $root_path.'/file_modify.txt';
$hour = date("H");
$today = date("m-d-Y");



     $myFile2 = "file_monitor.php.log";
     $fh3 = fopen($myFile2, 'a');
     $log_msg = "Last ran on: ".$today." at: ".$hour." \n";
     fwrite($fh3, $log_msg);
    

function scan_dir($path)
{
 $out = array();
 $files = opendir($path);

while ($f = readdir($files))
{
  $extension = substr($f,-3);
     
   if ($f=='.' or $f=='..' or $extension=='jpg' or $extension=='JPG' or $extension=='png' or $extension=='gif' or $f=='file_monitor.php' or $f=='file_modify.txt' or $f=='file_monitor.php.log' or $f =='error_log'  ) 
     {
   continue;
 }
 
  if (is_dir($path.'/'.$f))
    {
  $out = array_merge($out, scan_dir($path.'/'.$f));
} 
  //if  (((!is_dir($path.'/'.$f)) && ($f!='.' or $f!='..' or $extension!='jpg' or $extension!='JPG' or $extension!='png' or $extension!='gif'))
  else
  //  {
    $out[] = $path. '/'. $f;
//}
}

  $_SESSION['all_files'] = $out;
  
 return $out;
}

$a = scan_dir(getcwd());

$count_array = count($_SESSION['all_files']);
$loop_count=0;
while($loop_count < $count_array)
{
  // file in directory when was it last changed ?
  $filechange1 = date("m-d-Y-H", filemtime($_SESSION['all_files'][$loop_count]));
 
 // was it chnaged today and have I sent out an alert yet?
 if($filechange1 == $today."-".$hour) 
  {
$fh2 = fopen($error_monitor_file, 'a');
fwrite($fh2, "\n alert, file: ".$_SESSION['all_files'][$loop_count]." was changed today within the last hour ! \n");
    fclose($fh2);
  }
 $loop_count ++;
 // log file? was it changed this past hour?
 if (file_exists($error_monitor_file))
 {
   $filechange_log = date("m-d-Y-H", filemtime($error_monitor_file));
 
if ( ($loop_count == $count_array ) && ($filechange_log == $today."-".$hour ) )
{
        email();
     }
}
}

// function for email...
function email()
{
require_once ('class.phpmailer.php');

$mail = new PHPMailer();

$mail->IsSMTP();                                   // send via SMTP
$mail->Host     = "localhost"; // SMTP servers
$mail->SMTPAuth = true;     // turn on SMTP authentication
$mail->Username = "**c66@***ar.com";  // SMTP username
$mail->Password = "*****"; // SMTP password
$mail->From     = "***@***.com";
$mail->FromName = "Colonial Cottage File Changed";
$mail->AddAddress("email@*****.com"); 

$mail->WordWrap = 50;                              // set word wrap
//$mail->AddAttachment("/var/tmp/file.tar.gz");      // attachment
//$mail->AddAttachment("/tmp/image.jpg", "new.jpg"); 
$mail->IsHTML(true);                               // send as HTML

$mail->Subject  ="Unauthorized file changed today!";
$mail->Body     =  "" ;

$mail->AltBody  =  "This is the text-only body";

if(!$mail->Send())
   {
     exit();
   }
}

 if ((file_exists($error_monitor_file)) && $hour == "00")
 {
   unlink($error_monitor_file);
 }
 fclose($fh3);
 exit();
?>

Warning: session_start() [function.session-start]: Cannot send session cookie - headers already sent by (output started at /home/bakerde1/public_html/oceangamer.com/login.php:1) in /home/bakerde1/public_html/oceangamer.com/login.php on line 2

Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at /home/bakerde1/public_html/oceangamer.com/login.php:1) in /home/bakerde1/public_html/oceangamer.com/login.php on line 2

These are my error messages, here is my code. I don't know if it is the UTF-8 code at the start, but if it is can anyone recommend a binary editor to remove this. If it isn't what is the problem?

<?php  
  session_start();



$username = $_POST['username'];
$password = base64_decode($_POST['password']);


$errors = array();

if($username == 'User Name' || $username == ''){
  $errors[] = 'Please enter a valid username';
}

if($password == 'Password' || $password == ''){
  $errors[] = 'Please enter a valid password';
}

$link = mysql_connect("localhost","*****","******") or die ("Could not connect!");
mysql_select_db("chef");

$query = mysql_query("SELECT * FROM `users` WHERE `username`='$username'");
$numrows = mysql_num_rows($query);

if ($numrows!=0)
{
while($row = mysql_fetch_assoc($query))
{
$dbusername = $row['username'];
$dbpassword = $row['password'];
}
if ($username==$dbusername&&$password==$dbpassword)
{ 
$_SESSION['user'] = $username;
while ($row = mysql_fetch_array($res)) {
   $type = $row['Type'];
}
if ($type == "0") {
header("location: chefpanel.php");
}else{
header("location: restpanel.php");
}
}
else
 $errors[] = 'Username or Password Incorrect';
}
else
 $errors[] = 'Username or Password Incorrect';
?>
<html xmlns="http://www.w3.org/1999/xhtml">
<head>

Hi girls and boys

I am trying to set a variable if a session OR a cookie has been set, but am unsure on how to write the statement...

if (isset($_SESSION['name'])||isset($_COOKIE['name'])) {$variable = $_SESSION['name']||$_COOKIE['name'];}

Obviously not working there, but just need a pointer here.
any help is appreciated...

what would be the best way to
automate/force session destroy and cookie erase
i have a facebook iframe, with facebook login which gets the activation token
now the user is not logged out from the login script after he logs out of facebook.

any ideas how to force cookie timeout without a logout button?

im playing with
Code: [Select]
<?php
session_start();

//Global User Object Var
//loggedInUser can be used globally if constructed
if (isset($_SESSION['userCakeUser'])) {
$obj = casttoclass('stdClass', $_SESSION['userCakeUser']);
$_SESSION['userCakeUser'] = $obj;

$_SESSION['start'] = time(); // taking now logged in time
$_SESSION['expire'] = $_SESSION['start'] + (1 * 60) ; // ending a session in 1 minute
}
if(isset($_SESSION["userCakeUser"]) && is_object($_SESSION["userCakeUser"]))
{
$loggedInUser = $_SESSION["userCakeUser"];
}
?>

I have several "sites" located in my html directory, and each has a "general" access point and an "administrator" access point:

/var/www/html/site1/index.php
/var/www/html/site1/administrator/index.php
/var/www/html/site2/index.php
/var/www/html/site2/administrator/index.php
/var/www/html/site3/index.php
/var/www/html/site3/administrator/index.php

All sites are similar except that data will be specific to site1, site2, or site3, etc.   Users who log onto /var/www/html/siteX/index.php are totally unrelated to those who logon to /var/www/html/siteX/administrator/index.php, will have different logon credentials, are stored in different DB tables, and each should have their own session.  If a user logs off of either the general or administrator site, it should not effect the other site even if they were previously logged on to both on the same PC (and of course not effect other sites). When a user logs off, I would like to destroy their previous cookie and associated session.  Users for either will only use https.  I am using Apache to rewrite https://www.mysite.com/ to https://mysite.com/.  While I named the administrator site "administrator" above, the administrator user has the ability to change the directory name.   I am thinking I need to use session_set_cookie_params to specify where I wish the session cookie to be stored since /var/www/html/siteX/administrator/index.php is a sub-directory to /var/www/html/siteX/index.php, but am not really sure.  Sorry for the cryptic post, but I am not very well versed in this subject. How would you recommend setting up cookies/sessions for this scenario?  Thank you

What I'm trying to accomplish is your average session login w/ a cookie-based "remember me" feature.

I can log in fine, I can set cookies, I can access those cookies, and I can use that data to log in just as if the user had logged in manually.

The problem is logging out. But the bigger problem is figuring out why.

You see, it works perfect. It logs in and it log out, so long as I am outputting data to the page. I was outputting a session variable and the cookies I set to make sure they were all working right; and they were. But then as soon as I disable those echoes, all of a sudden it won't log out anymore.

So then I turn them on to see what the data says and BAM, I'm logged out. I log back in fine, I log back out fine, so I turn em off again.

I log in fine. I can't log out. I try multiple times. I close my browser and open a new one. Still logged in. I try a few more times, still logged in. I turn the output back on, load the page again and I'm logged out.

So... WTF? (my code to follow)

I'm having trouble setting a cookie in php.  When a user logs in I send an ajax request to an file which contains this code to set the cookie


setcookie("userCookie", $_SESSION['username'], time()+60*60*24*30);


However when I include the following code to check to see if the cookie has been set is says is hasn't


if(isset($_COOKIE['userCookie'])) {
echo("cookie set");
} else { echo("cookie not set"); }


I check to see that my browser is accepting cookies and it definitely is so I'm not sure what causing the problem. 

Thanks for any help. 

Hello,

I am new to this forum and joined in hope I could get some help in relation to some PHP problems I have stumbled across within my work. I am currently working on an online store I am building from scratch. I have already built the basic system behind it and am now starting to implement a more user friendly design to it with JS validation, stylesheets and imaging layout.

I have however come across a COOKIE problem with my login script. The purpose behind it is to only allow users into an area if they have logged in and declared cookies. I declare the cookies with 'setcookie()' then try and retrieve them with '$_COOKIE['firstname'];'.

However since implementing my new design layout it has stopped being able to retrieve the cookies. Here is some of the script. I would greatly appreciate any help given ...

Login.php
Code: [Select]
<?php
//Validating input details and executing mysql query
if ($username && $pass)
{
mysql_connect("$dhost","$dname","$dpass"); //Connection to mysql server
@mysql_select_db("$dbase") or die ("Unable To Select Database!"); //Connection to stated database
$query = "SELECT firstname, lastname, username FROM userdata WHERE password=SHA('$pass')"; //Retrieves firstname and lastname for username and password combination
$result = @mysql_query ($query);
$row = mysql_fetch_array ($result,MYSQL_NUM); //Return a record, if applicable
if ($row) {
setcookie('firstname', $row[0], time()+3600);
setcookie('lastname', $row[1], time()+3600);
setcookie('username', $row[2], time()+3600); //Set the cookies
echo "<p class='Body-error-P'><span class='Body-text-T'>Login successful. If you are not redirected in 15 seconds click <A HREF='./index.php'>here</A></span></p>";
print "<meta HTTP-EQUIV='REFRESH' content='5 url=./index.php'>";
} else { //no record matched the query
echo "<p class='Body-error-P'><span class='Body-text-T'>The username and password you entered are not valid.</span></p>";
}
mysql_close(); //close database connection
}
}

Index.php
Code: [Select]
<?php
include_once ("config.php");
if(isset($_COOKIE['firstname'])) //if not cookie present, redirect the user
{
echo "<p class='Body-text-P'><span class='Body-text2-T'>You are now logged in, <b>".$_COOKIE['firstname'].' '.$_COOKIE['firstname']."</b></span</p>";
} else {
echo '<p class="Body-text-P"><span class="Body-text-T">You are not logged in at this current time. Please login or register.</span</p>';
}
?>
Let me know if you need anymore coding...

Hello

A few days back I searched for a (very) easy php login script, basicly just to show hidden content that's not for everyone.
This is the script I found (and it works):

<?php
$username = "Username";
$password = "Password";
$randomword = "one";

if (isset($_COOKIE['MyLoginPage'])) {
   if ($_COOKIE['MyLoginPage'] == md5($password.$randomword)) {
?>
<?php 
include 'projecten_.php';
$name = "0";
?>
<?php
      exit;
   } else {
      echo "<p>Bad cookie. Clear please clear them out and try to login again.</p>";
      exit;
   }
}

if (isset($_GET['p']) && $_GET['p'] == "login") {
   if ($_POST['name'] != $username) {
      echo "<p>Sorry, that username does not match. Use your browser back button to go back and try again.</p>";
      exit;
   } else if ($_POST['pass'] != $password) {
      echo "<p>Sorry, that password does not match. Use your browser back button to go back and try again.</p>";
      exit;
   } else if ($_POST['name'] == $username && $_POST['pass'] == $password) {
      setcookie('MyLoginPage', md5($_POST['pass'].$randomword));
      header("Location: $_SERVER[PHP_SELF]");
   } else {
      echo "<p>Sorry, you could not be logged in at this time. Refresh the page and try again.</p>";
   }
}
?>
<body style="background:url(images/repeat.gif) repeat-x #0a0a09; height:106px; margin:0px; padding:0px; text-align: center;">
<div style="margin-left: auto; margin-right: auto; position: relative; top: 120px; width: 250px; text-align: left; line-height: 28px;">
<img src="images/zenze.png" alt="Zenze" style="position: absolute; top: -100px; left: -375px;" />
<h5 style=" font-weight: none; font-size: 18px; font-family: verdana; margin: 0px; margin-bottom: 20px; color: #96ff00">Login</h5>
<form action="<?php echo $_SERVER['PHP_SELF']; ?>?p=login" method="post">
<label><input type="text" name="name" id="name" /><span style="color: #999999; font-size: 12px; font-family:verdana"> Name</span></label><br />
<label><input type="password" name="pass" id="pass" /><span style="color: #999999; font-size: 12px; font-family:verdana"> Password</span></label><br />
<input type="submit" id="submit" value="Login" style="margin-top: 10px;" /></form>
</div>

</body>

The only problem is, there is no log out fuction. I see this script works with cookies and I gave it a try, and I ended up with nothing but errors.

Does anyone one has an idea to how a logout script would look like for this script?

Thanks in advance,

Crow

Hello community,

I am trying to create a login script, but in the HTTP Header it only sends the last cookie set.

I first tried this code:

$expire=time()+60*60*24;
setcookie("gcg_user",$userid,$expire);
setcookie("gcg_name",$username,$expire);
setcookie("gcg_pass",$password,$expire);

But it only set the gcg_pass cookie. Someone else suggested me to use header():

$expire=date(DATE_RFC822,time()+60*60*24);
header('Set-Cookie: gcg_user="'.$userid.'"; expires='.$expire.';');
header('Set-Cookie: gcg_name="'.$username.'"; expires='.$expire.';',false);
header('Set-Cookie: gcg_pass="'.$password.'"; expires='.$expire.';',false);

But again it only sets the last cookie.
The first code has been working fine on another server. Do I have to adjust anything in php.ini?

Running XAMPP Lite:
Quote

###### Apache Friends XAMPP Lite (Basis Package) version 1.7.3 ######
  + Apache 2.2.14 (IPV6 enabled)
...
  + PHP 5.3.1 (PEAR)
...


Any help on that? Thanks in Advance!

Hey guys,
I have developed an script which opens or fetches a page using curl, now the problem is the url i am trying to fetch follows lot of redirects(say 302) and in between it stores several cookies also which i don't know or guess.
So i was just thinking, is there any way so that i can automatically store the cookies in a particular file which server wants to store, and let it sent in request as per the asking of a request  in request header?

I hope you would have got what i mean to say here, for example
suppose i want to open http://www.example.com
and now that above url faces lot of redirects probably 5-6 and then ends up on http://www.test.com

now in between it stores some cookies in clients computer and then it fetches them also. Since i don't know which cookie it gonna store, I must put this responsibility to PHP itself to store and send the requested cookies in request headers.

Also i want to send the referrer also in request header, and it must be the last page that or request sent to the server, no matter whether it's in betwen redirects or to the final page.

In short i mean to create the complete emulation of browser for this URL.

I have a web application in which there are two php files index.php and  include.php .

include.php is loaded to a DIV tag inside index.php on click of button using Jquery . Both these php files share a common varible through cookie which is used to keep track of the data retrived by include.php . This variable will be updated each time include.php retrives data .
These php code work fine  Mozilla and chrome  but not in IE . When i checked the cookie value it is same through out without setting .

Please help .

Thanks in advance ,
Rahul