Losing Sessions & logoffs

[brewbeer]

I recently moved my oscommerce site from one server to another. Formerly, when a customer clicked a link in the product description that did not use the tep_href_link and only <a href="www.domain.com/product_info.php?product_id=XXX">, then the customer would remain logged in and the session still available.

 

However, on the new server, if the customer clicks a basic <a href...> link like above without tep_href_link the session is lost and the customer is no longer logged in. If they Back Page the session will once again be valid. The session ID is also appearing in the Browser address and didnt before on the old server.

 

I am expecting that the PHP.INI or apache conf on the new server has a misconfigured value. I have full root access to the new server and can reconfigure any file needed. It is running on Fedora 3, Apache 1.3.33 and PHP 4.3.11 .

 

Thanks for the help!

[brewbeer]

Ack!

 

Mozilla works and IE doesn't. IE is not placing the cookie with the session id in its tempory internet files. It is keeping the osc sid in the address URI. I have reset IE cookie acceptance to medium and also have allowed cookies. Other sites work on IE as well as on my old server.

 

I do not understand this issue and I am unsuccessful in sifting through so many session issues. Please, help!

[brewbeer]

This reply is to answer my own problem for all those others out there that may have the issue.

 

I found that on my productive server (the live one on the web for customers) I had 'localhost' defining the HTTP & HTTPS cookie domain. Oops. it should be 'www.domain.'com for both.

 

Although, I have not quite figured out why my local development site using apache on windows is not saving the cookies. Not so much of a big deal since it is local, but I sure would like to get that dang oscid gone and use links without tep_href... but oh well.