6

For each time $this->session->set_userdata() or $this->session->set_flashdata() is used in my controller, another identical "Set-Cookie: ci_session=..." is added to the http header the server sends.

Multiple Set-Cookie fields, with the same cookie name, in the http header is not okay according to rfc6265.

So is there a way to use codeigniter sessions without it creating multiple identical "set-cookie:"s?

(I've used curl to verify the http header)

mathulus
  • 75
  • 1
  • 5

3 Answers3

5

check https://github.com/EllisLab/CodeIgniter/pull/1780

By default when using the cookie session handler (encrypted or unencrypted), CI sends the entire "Set-Cookie" header each time a new value is written to the session. This results in multiple headers being sent to the client.

This is a problem because if too many values are written to the session, the HTTP headers can grow quite large, and some web servers will reject the response. (see http://wiki.nginx.org/HttpProxyModule#proxy_buffer_size)

The solution is to only run 'sess_save()' one time right after all other headers are sent before outputting the page contents.

Community
  • 1
  • 1
0

I believe you can pass an array to $this->session->set_userdata(); I haven't tested this code so it is merely a suggestion to try something along these lines:

$data = array(
    'whatever' => 'somevalue',
    'youget' => 'theidea'
);

$this->session->set_userdata($data);

NB: When I say I haven't tested the code.. I have used this code and I know it works, I mean I havent tested if it will reduce the amount of headers sent.

Dale
  • 10,384
  • 21
  • 34
  • The problem with that is that codigniter creates a first session cookie just for requesting the page, so with just one $this->session->set_userdata() call there will be two "Set-Cookie: ci_session=..."s. – mathulus Apr 19 '12 at 14:40
  • Personally, and with experience from real projects using CodeIgniter, I don't use CI sessions. I much prefer using native php sessions and native php session functions. – Dale Apr 19 '12 at 14:42
0

In my case, the error is in the browser (Chrome). It stored 2 cookie and send both to server, this make server create new session all the time. I fixed it by clear the cookies in browser. Hope it help someone. :)

imrhung
  • 824
  • 1
  • 10
  • 20