Session Data Lost after Redirection in PHP-FPM

Question

I have set up an Oracle Linux server with Apache httpd and PHP 8.3.12 (running as PHP-FPM). However, the $_SESSION["user"] variable returns null after a page redirection.

The PHP application was previously running successfully on an older CentOS server as well as using XAMPP under Windows desktop environments.

This problem causes my application not able to login users in.

Does anyone know how I can resolve this issue of losing session data after redirection when using PHP-FPM on Oracle Linux?

The session path is set to 0;777; in the /etc/php-fpm.d/www.conf file:

php_value[session.save_path] = "0;777;/var/lib/php/session"

Some things I have checked:

The session save path and permissions are correct
session.save_handler is set to "files"
Restarting PHP-FPM and httpd did not fix the problem.
I deleted all the files in the session.save_path, and upon logging into the application, new session files were generated in the session.save_path.

Any suggestions on how to troubleshoot this further would be appreciated.

Redirection from where to where? Did you, for example, go from https://example-a.com/login.php to https://example-b.com/loggedin.php? Can you add the redirection code in your question? — KIKO Software
– KIKO Software, Commented Oct 8, 2024 at 13:33
The redirection is from http://example.com/login to http://example.com/ after authentication checking. — Casper LI
– Casper LI, Commented Oct 8, 2024 at 13:36
You're implying this is a sessions problem during redirection. Did you check that the problem doesn't exist when you do not redirect? In other words, the session works fine without the redirect? It's always a good idea, if you have two things that could cause a problem, to test them individually. — KIKO Software
– KIKO Software, Commented Oct 8, 2024 at 13:38
Side note: Logging in over an unsecured protocol doesn't sound very secure. — KIKO Software
– KIKO Software, Commented Oct 8, 2024 at 13:42

Casper LI · Accepted Answer · 2024-10-09 09:30:52Z

0

The problem was finally resolved by installing the SSL certificate and accessing the website via HTTPS.

answered Oct 9, 2024 at 9:30

Casper LI

4,82311 gold badges45 silver badges76 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

KIKO Software Over a year ago

It's nice to know what solved the problem, but we still don't know the cause. Is session.cookie_secure set to true? Note that a good answer also explains why your problem happened.

Collectives™ on Stack Overflow

Session Data Lost after Redirection in PHP-FPM

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related