empirenine:
- Setting "recreate sessions" to false (and vice versa)
- Setting "force cookie use" to false (and vice versa)
- Setting every other Admin > Configuration > Sessions setting to true & false
Try this:
- Please put all those settings back to the defaults, except leave "recreate session" to "false" (since Dreamhost requires that).```
Cookie Domain True
Force Cookie Use False
Check SSL Session ID False
Check User Agent False
Check IP Address False
Prevent Spider Sessions True
Recreate Session **** False for Dreamhost ****
IP to Host Conversion Status true
2. Replace your /includes/functions/sessions.php with the contents below. This is a modified/retrofitted version of fixes added since v1.3.0.1
(this is a good time to remind you that 2 bugfix releases have been issued since v1.3.0.1)
<?php
/**
* functions/sessions.php
* Session functions
*
* @package functions
* @copyright Copyright 2003-2005 Zen Cart Development Team
* @copyright Portions Copyright 2003 osCommerce
* @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
* @version $Id: sessions.php retrofitted for v1.3.0.1 $
*/
if (!defined('IS_ADMIN_FLAG')) {
die('Illegal Access');
}
if (STORE_SESSIONS == 'db') {
if (defined('DIR_WS_ADMIN')) {
if (!$SESS_LIFE = (SESSION_TIMEOUT_ADMIN + 900)) {
$SESS_LIFE = (SESSION_TIMEOUT_ADMIN + 900);
}
} else {
if (!$SESS_LIFE = get_cfg_var('session.gc_maxlifetime')) {
$SESS_LIFE = 1440;
}
}
function _sess_open($save_path, $session_name) {
return true;
}
function _sess_close() {
return true;
}
function _sess_read($key) {
global $db;
$qid = "select value
from " . TABLE_SESSIONS . "
where sesskey = '" . zen_db_input($key) . "'
and expiry > '" . time() . "'";
$value = $db->Execute($qid);
if (isset($value->fields['value']) && $value->fields['value']) {
return $value->fields['value'];
}
return ("");
}
function _sess_write($key, $val) {
global $db;
global $SESS_LIFE;
$expiry = time() + $SESS_LIFE;
$value = $val;
$qid = "select count(*) as total
from " . TABLE_SESSIONS . "
where sesskey = '" . zen_db_input($key) . "'";
$total = $db->Execute($qid);
if ($total->fields['total'] > 0) {
$sql = "update " . TABLE_SESSIONS . "
set expiry = '" . zen_db_input($expiry) . "', value = '" . zen_db_input($value) . "'
where sesskey = '" . zen_db_input($key) . "'";
return $db->Execute($sql);
} else {
$sql = "insert into " . TABLE_SESSIONS . "
values ('" . zen_db_input($key) . "', '" . zen_db_input($expiry) . "', '" .
zen_db_input($value) . "')";
return $db->Execute($sql);
}
}
function _sess_destroy($key) {
global $db;
$sql = "delete from " . TABLE_SESSIONS . " where sesskey = '" . zen_db_input($key) . "'";
return $db->Execute($sql);
}
function _sess_gc($maxlifetime) {
global $db;
$sql = "delete from " . TABLE_SESSIONS . " where expiry < " . time();
$db->Execute($sql);
return true;
}
session_set_save_handler('_sess_open', '_sess_close', '_sess_read', '_sess_write', '_sess_destroy', '_sess_gc');
}
function zen_session_start() {
@ini_set('session.gc_probability', 1);
@ini_set('session.gc_divisor', 2);
if (defined('DIR_WS_ADMIN')) {
@ini_set('session.gc_maxlifetime', (SESSION_TIMEOUT_ADMIN < 900 ? (SESSION_TIMEOUT_ADMIN + 900) : SESSION_TIMEOUT_ADMIN));
}
return session_start();
}
function zen_session_register($variable) {
die('This function has been deprecated. Please use Register Globals Off compatible code');
}
function zen_session_is_registered($variable) {
die('This function has been deprecated. Please use Register Globals Off compatible code');
}
function zen_session_unregister($variable) {
die('This function has been deprecated. Please use Register Globals Off compatible code');
}
function zen_session_id($sessid = '') {
if (!empty($sessid)) {
return session_id($sessid);
} else {
return session_id();
}
}
function zen_session_name($name = '') {
if (!empty($name)) {
return session_name($name);
} else {
return session_name();
}
}
function zen_session_close() {
if (function_exists('session_close')) {
return session_close();
}
}
function zen_session_destroy() {
return session_destroy();
}
function zen_session_save_path($path = '') {
if (!empty($path)) {
return session_save_path($path);
} else {
return session_save_path();
}
}
function zen_session_recreate() {
global $http_domain, $https_domain, $current_domain;
if ($http_domain == $https_domain) {
$saveSession = $_SESSION;
$oldSessID = session_id();
session_regenerate_id();
$newSessID = session_id();
session_id($oldSessID);
session_id($newSessID);
if (STORE_SESSIONS == 'db') {
session_set_save_handler('_sess_open', '_sess_close', '_sess_read', '_sess_write', '_sess_destroy', '_sess_gc');
}
session_start();
$_SESSION = $saveSession;
if function_exists('whos_online_session_recreate') whos_online_session_recreate($oldSessID, $newSessID);
} else {
}
}
?>
