doudieheng5322 2010-01-06 09:09
浏览 20
已采纳

PHP会话问题

I am having one hell of a problem that I cannot figure out for the life of me. I have set up a super simple CMS for a client. Each different page of the CMS has and include file called session.php.

session_start(); 
$username = $_SESSION['siteadmin'];
if (!$_SESSION['siteadmin']){
    header( 'Location: login.php?status=2' );
}

Every now and again, random things would disappear from the database. So, I setup a crude log system that logged any action through the CMS. Well, it happened again. The logs show this:

Logged in                           **.**.237.209   17:18  <-- thats me
Deleted board member id 12  195.42.102.25   16:49 
Deleted board member id 15  195.42.102.25   16:49 
Deleted board member id 8   195.42.102.25   16:49 
Deleted board member id 10  195.42.102.25   16:49 
Deleted board member id 9   195.42.102.25   16:49 
Deleted board member id 4   195.42.102.25   16:49 
Deleted board member id 3   195.42.102.25   16:49 
Deleted board member id 5   195.42.102.25   16:49 
Deleted board member id 6   195.42.102.25   16:49 
Deleted board member id 11  195.42.102.25   16:49 
Deleted board member id 7   195.42.102.25   16:49 
Deleted review id 2             195.42.102.25   16:49 
Deleted review id 3             195.42.102.25   16:49

and that goes on for a couple pages. It doesn't even show 195.42.102.25 logging in! Last time it happened with 195.128.18.19. How are they computers loading the window without a session variable? Is there a security hole in my code that I am completely overlooking?!

Any insight on this issue would be awesome.

Thanks,

  • 写回答

3条回答 默认 最新

  • douyin4875 2010-01-06 09:10
    关注

    Put an exit after header.

    本回答被题主选为最佳回答 , 对您是否有帮助呢?
    评论
查看更多回答(2条)

报告相同问题？

  • PHP会话 - 几个问题 php
    2017-02-22 09:59
    回答 3 已采纳 No, the session garbage collection is managed by the system, based on the session.gc_maxlifetime
  • PHP会话变量请求时间 php
    2019-03-07 11:29
    回答 1 已采纳 Unless you do these session read/write operations millions of times (e.g. in a loop) you shouldn't
  • PHP会话不更新变量 php
    2018-08-17 09:28
    回答 2 已采纳 session_start() must be the second thing on your page after <?php. HTML tags must be placed aft
  • PHP会话问题
    2021-02-23 06:23
    PHP会话问题
  • PHP LDAP会话持久性 php
    2019-02-04 15:31
    回答 1 已采纳 The problem is not about LDAP, the problem is about HTTP. HTTP is a stateless protocol whereas LD
  • PHP会话干扰子域会话 php
    2017-11-21 17:01
    回答 1 已采纳 Since they share the same domain, they are the same site and share a session. You can manually ov
  • PHP会话传播 php
    2017-03-13 10:01
    回答 1 已采纳 first you have to read what have been removed and edited in php (session.configuration) versions
  • PHP企业微信会话存档扩展
    2023-07-13 17:18
    PHP企业微信会话存档扩展
  • PHP会话相关问题 php
    2013-08-10 18:38
    回答 2 已采纳 Session is a type of cookie that used for tracking user after login! for example: after user submi
  • 实现PHP会话令牌时出现问题 html php
    2018-08-29 15:41
    回答 1 已采纳 There's a few problems with your code: token.php needs to output the token. Which is as simple as
  • PHP会话超时/注销 php
    2015-11-17 00:53
    回答 3 已采纳 When you exit your browser, it will clear all SESSIONS. That is why you always have to relogin eve
  • PHP会话跟踪
    2019-07-22 12:12
    资源名称：PHP会话跟踪内容简介：PHP会话跟踪什么是会话控制会话跟踪技术实现简单的会话创建一个简单的会话的例子配置会话控制什么是会话控制™ 我们需要一种强有力的解决方案，为了使得网站可以跟踪客户端与服务器...
  • Php会话变量问题 php
    2014-04-18 08:32
    回答 1 已采纳 You have problem in this line.. $CAMPAIGN_ID = array_pop(array_keys($campaigns)); Break it up..
  • phpsession:PHP 会话工具
    2021-07-17 08:18
    PHP会话用于简洁而强大的项目的免费 PHP 会话工具！文档PHPSession 是一个小包，用于在面向对象和更安全的方法中使用会话。 有一个名为Session的类，您可以与之交互以访问操作会话。安装使用作曲家强烈建议使用将 ...
  • PHP会话控制实例分析
    2020-10-20 19:05
    主要介绍了PHP会话控制,结合实例形式分析了php针对cookie与session的相关操作技巧,需要的朋友可以参考下
  • 没有解决我的问题, 去提问

悬赏问题

  • ¥15 对于这个问题的代码运行
  • ¥50 三种调度算法报错 有实例
  • ¥15 关于#python#的问题，请各位专家解答！
  • ¥200 询问：python实现大地主题正反算的程序设计，有偿
  • ¥15 smptlib使用465端口发送邮件失败
  • ¥200 总是报错，能帮助用python实现程序实现高斯正反算吗？有偿
  • ¥15 对于squad数据集的基于bert模型的微调
  • ¥15 为什么我运行这个网络会出现以下报错？CRNN神经网络
  • ¥20 steam下载游戏占用内存
  • ¥15 CST保存项目时失败