Posting Security System

[djames]

Script URL: http://www.kenilworth.qld.au/gbook/gbook.php
Version of script: 1.7
Hosting company: Netfirms
URL of phpinfo.php: http://www.kenilworth.qld.au/gbook/
URL of session_test.php: http://www.kenilworth.qld.au/gbook/
What terms did you try when SEARCHING for a solution: security

Write your message below:

Postings became impossible because the security image failed to display. I changed settings['autosubmit'] to 2 and the text number did then appear but was not recognised as correct.

I had not changed any settings so presume this is a server problem?

[Klemen]

This means sessions aren't working in GBook.

Did you modify any of the gbook files? Try uploading the original ones again (original files from phpjunkyard.com - without even opening them in an editor) and see if that makes a difference.

[djames]

I haven't changed any settings, apart from changing AUTOSUBMIT to 2 and then to 0 after the problem appeared. If I upload all the files again I will loose all the existing postings - is there anything else I can try first?

[Klemen]

This is not a settings problem, but rather a PHP sessions problem. Something is preventing the script from properly setting PHP sessions, most likely http headers are being output to the browser before the script sends session headers.

This usually happens when PHP files are not properly modified - for example, saved in utf-8 with byte order mark (BOM) added.

If you upload all files *except* settings.php and entries.txt you will keep all existing entries.

Of course, make a backup of all files before making changes.

[Henrie]

It could also be that the hosting company has made an upgrade/change to their php installation which broke sessions.

[Klemen]

Usually that could be the case, but his sessions test file work fine, so it's not a global sessions problem.

[djames]

I've tried uploading files again with no effect so have decided to use the spam question option instead of a security number - this works OK.

It seems that Netfirms were recently aquired by TuCows and I have noticed some differences in their systems - especially mail accounts and password requirements. Perhaps it could still be something to do with them?

Thanks for your help.