Sessions Problem

[ruski]

Dear Friends,

 

I have a problem where a user's session variable "user_id" changes to another "user_id" in the same office. This happens on a random occasion from what I can see. However the user which the id changes to isn't always in the office and logged in at the same time. For example it happened today and that user is actually on holiday at the moment.

 

Our office runs SBS 2003 but we don't use any proxies.

 

setup: office pcs(30+) > netgear switch > cyberoam hardware firewall > vigor router & modem > ISP > our site on a VDS

 

Any ideas what could be causing this?

 

thanks

[GetPutDelete]

I don't think it has to do with your network as temp sessions are stored locally, I'd check your code.

[PFMaBiSmAd]

Your code probably has a logic error in it that is assigning a value instead of comparing a value (i.e using one = instead two == in a comparison.) You might also have a header redirect without an exit; statement after it and the code on the rest of the page is setting or changing the value.

 

You might also be using your own session save handler and it contains an error or makes an assumption about values.

 

You could also have register_globals on and same name post/get/cookie/program variable is overwriting your session variable.

 

Without specific information about the code that exhibits the problem, it is just a guessing game as to what is causing it.