You cannot avoid using cookies. When you use Sessions web server is making
use of cookies (unless you go for URL rewriting) which remains in the
browser until one quits the browser.

To tackle your situation, you can effectively make use of a database table 
and a session cookie: 

1. set a session cookie (different from one set by the server) as a soon
as as a login is successful. This cookie should be set in such a way that
the browser will send it back to any server in your domain. The value for
this cookie can be the same as the value PHP generated for the Session ID.
If you prefer to use some other value make sure that it is different for
each session for each user to avoid security issues.

2. Store this value and the user ID (or something else to identify that
user in your app) in a table.

3. Remove this row from the table when the user logs out or on Session 
timeout.

Now, when the user is taken to your ASP server, browser will send that
cookie set by the PHP server along with the request and the ASP server can
query the database for that cookie value to get the user ID. If it can
find it in the table the application can make sure that the request is
valid and the rest of the info can be pulled from the database.


   Anil




On Wed, 21 Aug 2002, Mark McCulligh wrote:

> I have two server.  One running PHP/Linux the other running ASP/2000.
> The user logins into the PHP server and session variables are made to hold
> their username, password, department, etc..  The site from time to time
> redirect the user to the ASP server.  I want to pass the session variable
> across to the other server.  I can't use the GET method.
> (www.domain.com/form.asp?username=Mark.....) because putting the password on
> the address bar is not an option.  The ASP server will redirect them back
> when they are done on it. It will pass back the variables just in case the
> session on the PHP server has expired for the PHP server can create a new
> session if needed.
> 
> I don't want to use a cookie.
> 
> I was thinking of using cURL but I can't fine any information about using it
> in ASP.  I know how to use cURL in PHP to redirect the user to the ASP
> server and pass the variables in the POST method, but not the other way.
> 
> Any ideas would be a GREAT help.
> Mark.
> 
> _________________________________________
> Mark McCulligh, Application Developer / Analyst
> Sykes Canada Corporation www.SykesCanada.com
> [EMAIL PROTECTED]
> 
> 
> 

-- 
+91 471 324341 (Office)
+91 98473 22280 (Cell)

Linuxense Information Systems Pvt. Ltd., Trivandrum, India
http://www.linuxense.com


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to