>>> Mozilla was ignoring/rejecting the session cookie because it was >>> configured to accept cookies from the originating server only. This >>> means that Mozilla examines the domain field of any cookie that is set >>> and compares it to the hostname of the current URL. In the case of the >>> Squirrelmail session cookie, but not the other cookies set by >>> Squirrelmail, the domain field is blank. >> >> Why is the host name in your URL changing between login.php and >> webmail.php? Seems like the problem is not with SM.... > > The URL hostname does not change at any point in the process. I was able > to trace SM execution from the top all the way to the session_start() > call. (That was when I realized that the session cookie should have been > set at the login page itself, not merely afterward, and then I was able > to quickly solve my problem.) The session cookie domain field was never > set within the code that I could tell, and arrived to the browser blank; > therefore the browser discarded it under the "originating server only" > rule. There is no config.php option to set the cookie domain either, at > least not that I saw, so the only thing that will set it other than the > code itself is php.ini or the Apache configuration. > > (My only guess as to why the "key" and "squirrelmail_language" cookies > did have a domain field set is because they are created via a > setcookie() call, not a session_start() call. These calls might use > separate cookie logic under the covers. Or maybe there is some subtle > config problem with my PHP 4.3.5?) PHP's bleeding edge has been consistently inconsistent when it comes to session behavior. I'm not saying SM is perfect, but I'd say there's a good chance that your PHP is the cause, especially since this is the first we've heard of this. Should we hear it again, we'll have your solution on hand. Thanks, Paul ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id70&alloc_id638&op=click -- squirrelmail-users mailing list List Address: [EMAIL PROTECTED] List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id)95 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
