jakebur01 Posted August 14, 2007 Share Posted August 14, 2007 Could someone please walk me through passing a session from http on one domain to https on another?\ thanks, jake Quote Link to comment Share on other sites More sharing options...
jakebur01 Posted August 14, 2007 Author Share Posted August 14, 2007 has anyone ever done this?> Quote Link to comment Share on other sites More sharing options...
m1a2x3x7 Posted August 14, 2007 Share Posted August 14, 2007 I'm still working on it give me sometime Quote Link to comment Share on other sites More sharing options...
lightningstrike Posted August 14, 2007 Share Posted August 14, 2007 Store the session data serialized in a database table with the session id. Then redirect the user to the secure page with the session id e.g <https://www.domain.com/regen.php?PHPSESSID=832h2bdssdfadfd> regen.php renames the session id to a random value to avoid session fixation and stores it in a secure cookie and redirects them once again to another secure page where they can continue browsing. I'm assuming thats the kind of thing your looking for. Quote Link to comment Share on other sites More sharing options...
jakebur01 Posted August 14, 2007 Author Share Posted August 14, 2007 could you serialize it and pass it through the url then get it on the https page? Quote Link to comment Share on other sites More sharing options...
jakebur01 Posted August 14, 2007 Author Share Posted August 14, 2007 I don't want to store this in a database. I want to go through a cookie. Quote Link to comment Share on other sites More sharing options...
micah1701 Posted August 14, 2007 Share Posted August 14, 2007 I want to go through a cookie. i don't think you can do that because one site can't read the cookies from another. but i'm not claiming to be a cookie expert. Quote Link to comment Share on other sites More sharing options...
d22552000 Posted August 14, 2007 Share Posted August 14, 2007 one site can read another's cookies, althgouh its a security whole in IE7m it still can. in the cookie http read request choose domain="whatevertheredirectsitewas" and because of IE7 bad programming, and IE6, and FF2 not being fixed. u will get it -,-. Quote Link to comment Share on other sites More sharing options...
jakebur01 Posted August 14, 2007 Author Share Posted August 14, 2007 Do you have any code to show me an example? what to put on page a > link to page b what to put on page b (this is also a ssl page) I just need my session from page a here on page b Quote Link to comment Share on other sites More sharing options...
m1a2x3x7 Posted August 15, 2007 Share Posted August 15, 2007 "you cant share sessions across different domains and http - https make them different why not drop the order details in the db before switching to https you can get the last db_id and append it to the checkout link then perform a $_GET['db_id'] to catch the id in the https page. Then use the id to query the db and retrieve the order details" a good programming friend told me this Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.