...

View Full Version : sessions http/https



the moose
03-12-2009, 03:03 AM
I seem unable to pass anything across from https through to http sessions. Is this usual? What is the way around it??

Cheers

The Moose

CFMaBiSmAd
03-12-2009, 03:48 AM
That's the way sessions work.


What is the way around it??Stay on https

The reason browsers don't pass the session id back and forth between https and http is because if you have anything important enough to use https for and created a session, it is not safe to pass the session id through http so that the session can get hijacked.

the moose
03-12-2009, 04:00 AM
Stay on https

This, unfortunately isn't possible because of the nature of the site.

What other way can I go about passing the data around?

Cheers

The Moose

the moose
03-12-2009, 04:07 AM
Oh, and IE 7 does infact pass the session variables around!! Was developing in FF on a non secure server, moved to secure and this was obviously overlooked!!

Any ideas?

Cheers

The Moose



EZ Archive Ads Plugin for vBulletin Copyright 2006 Computer Help Forum