Session bug?

I've found a session "bug" on IE (from 6.0 to 8.0)...
This simple script (test.php):

<?php
session_start();
$_SESSION['test'].=" - ";
print_r($_SESSION);
?>

don't works if domain name contains a "_" (session are deleted on
every reload).
In my case, the script works on:

http://test.mydomain.com:8080/test.php

but don't works on:

http://test_v1.mydomain.com:8080/test.php

Can you try?

PS: same script work on Firefox, Konqueror and Opera (latest versions)

Thanks,
Antonio

"radar" <a.pasqua@gmail.com> wrote in message
news:690b385d-d0ef-4e40-b089-30759ec93d61@v36g2000yqv.googlegroups.com...
> I've found a session "bug" on IE (from 6.0 to 8.0)...
> This simple script (test.php):
>
> <?php
> session_start();
> $_SESSION['test'].=" - ";
> print_r($_SESSION);
> ?>
>
> don't works if domain name contains a "_" (session are deleted on
> every reload).
> In my case, the script works on:
>
> http://test.mydomain.com:8080/test.php
>
> but don't works on:
>
> http://test_v1.mydomain.com:8080/test.php
>
> Can you try?
>
> PS: same script work on Firefox, Konqueror and Opera (latest versions)
>
> Thanks,
> Antonio


IE is very strict about domain name handling - the RFCs do not allow FQDNs
to contain an underscore, so IE will not allow a cookie to be set for one
that does.

--
Dan

radar wrote:

> ... domain name contains a "_" ...

Use a valid domain name. Underscore are not a valid character in domain
names. Valid characters are:

- A through Z, inclusive
- 0 through 9, inclusive, except the URL name cannot start with a digit.
- Hyphen ("-").

http://www.faqs.org/rfcs/rfc1034.html
section 3.5

On 5 Nov, 20:13, VanguardLH <V...@nguard.LH> wrote:
> radar wrote:
> > ... domain name contains a "_" ...
>
> Use a valid domain name. *Underscore are not a valid character in domain
> names. *Valid characters are:
>
> - A through Z, inclusive
> - 0 through 9, inclusive, except the URL name cannot start with a digit.
> - Hyphen ("-").
>
> http://www.faqs.org/rfcs/rfc1034.html
> section 3.5

ok.. this is true, but why IE contacts the domain? on syntax error on
domain name the browser should not send request and so on..
on other browsers all works well (and Bind DNS don't report errors on
zone with "_" into hostnames)

Thanks,
Antonio

"radar" <a.pasqua@gmail.com> wrote in message
news:ebe72ce0-3cc0-4d9f-8214-fefe88e0bd1f@v30g2000yqm.googlegroups.com...
> On 5 Nov, 20:13, VanguardLH <V...@nguard.LH> wrote:
>> radar wrote:
>> > ... domain name contains a "_" ...
>>
>> Use a valid domain name. Underscore are not a valid character in domain
>> names. Valid characters are:
>>
>> - A through Z, inclusive
>> - 0 through 9, inclusive, except the URL name cannot start with a digit.
>> - Hyphen ("-").
>>
>> http://www.faqs.org/rfcs/rfc1034.html
>> section 3.5
>
> ok.. this is true, but why IE contacts the domain? on syntax error on
> domain name the browser should not send request and so on..
> on other browsers all works well (and Bind DNS don't report errors on
> zone with "_" into hostnames)

Bind DNS by default sets check-names to ignore. You need to reconfigure Bind
to use either warn or fail for the check-names setting - if you use SPF,
SRV, or any TXT records that need to have an underscore set it to warn or
otherwise Bind will reject your zone file; the use of underscores is allowed
in these records, they are deliberately used to make it very clear that
these are not hostnames.

--
Dan