a new question about phpdig and sessions

[kmacsparran]

I am building a website using PhpDig for searches, and osCommerce for a shopping cart.

For the most part, both are working fine. The problem comes when a user is logged in (as a shopping cart user) and then executes a search. The results page looks fine, but if the user clicks on ANY link displayed in the results page, the page that is opened looses all session and cookie information.

It appears that for some reason, that information is being cleared between displaying the results page and opening a page FROM the results page. Does anyone know of a way to prevent this?

[Charter]

PhpDig indexes content from a site that a r****m surfer can see. There are the following options in the config file to remove session IDs from URLs, but this is for any session ID that get assigned to PhpDig as it crawls a site:

define('PHPDIG_SESSID_REMOVE',true);
define('PHPDIG_SESSID_VAR','PHPSESSID,s');

osCommerce looks like it uses osCsid as the variable name for its session ID, but PhpDig isn't going to know about the session ID unless it is passed in a form or query string. You could try setting a hidden field in the PhpDig search form:

<input type="hidden" name="osCsid" value="osCommerce variable containing session ID goes here">

And then clean $_REQUEST['osCsid'] in search.php, pass the cleaned variable into the phpdigSearch function, and then append the cleaned variable to link variables in the phpdigSearch function.

This all assumes that your users search from your osCommerce pages. As soon as a user does a direct search, there won't be a osCsid session ID around to pass into PhpDig unless you can set osCommerce to dump its session ID in a cookie.