Fabrizio Ermini wrote:

> Hi!
> 
> Is there still someone around here? :-)
> 
> After all these years I continue to use my dear library (with pre-php4
> session). Until lately I didin't have any problem.
> But I've a couple installation made under apache 2.0 (that's starting to be
> the default on many recent distros) that give me serious trouble:
> it appears that erratically it happens some sort of "server side session
> hijacking": a user logs in and "inherits" session data of a DIFFERENT user
> that it's logged at the same time. This is quite rare, but not so much to
> be explained with an MD5 collision!
> The subject of this post refers to Apache 2 because that is the fact that
> those two installations have in common. I've never seen something like this
> in a apache 1.3.x installation.
> 
> Is there anybody that can share come thought on this? Should I upgrade to
> session4? Downgrading Apache version seem quite difficult to do.
>   
> 
Although I have no idea what's causing the problem (and Apache versions 
/shouldn't/ have anything to do with it) I'd recommend upgrading to 
session4, myself. Provided you didn't alter the existing session API, it 
should be a drop-in replacement.

-- 
___________________________
Nathaniel Price
http://www.tesserportal.net
Webmaster



-------------------------------------------------------
SF.Net email is sponsored by: Discover Easy Linux Migration Strategies
from IBM. Find simple to follow Roadmaps, straightforward articles,
informative Webcasts and more! Get everything you need to get up to
speed, fast. http://ads.osdn.com/?ad_id=7477&alloc_id=16492&op=click
_______________________________________________
Phplib-users mailing list
Phplib-users@[...].net
https://lists.sourceforge.net/lists/listinfo/phplib-users