Hi all,
I have a little module that inserts a flash application inside a drupal page. The problem is that when the flash interacts with the site, it does not obey to the session cookie and does not start the correct session.
Because I really cannot make the flash use, or send the correct cookie, the only option is by sending in the URL the session id.
Now the big problem is: how can I send in the URL the session id just for that path in a way Drupal understands and processes it?
Best regards, Fernando Silva
There must be something wrong in your app. Flash is supposed to use the browser to send http requests and thus Drupal should receive the session from the flash http request like it would for a normal http request from the browser. Anyway, you can use the standard url get syntax, like :
yoursite.com/node/5?session_id=yoursession_id
the part after ? will not harm Drupal (Drupal pager use the same syntax)
I hope that helps, but I fear that it won't, because sending the session like this will have no influence on the Drupal side. You should take a look at Drupal session handling, and see if it uses the same system as the built in php session handling (which appends a url query string when cookies are not available)
Philippe
On 9/4/07, Fernando Silva fsilva.pt@gmail.com wrote:
Hi all,
I have a little module that inserts a flash application inside a drupal page. The problem is that when the flash interacts with the site, it does not obey to the session cookie and does not start the correct session.
Because I really cannot make the flash use, or send the correct cookie, the only option is by sending in the URL the session id.
Now the big problem is: how can I send in the URL the session id just for that path in a way Drupal understands and processes it?
Best regards, Fernando Silva -- [ Drupal support list | http://lists.drupal.org/ ]
Hi Philippe,
On 9/4/07, Philippe Jadin philippe.jadin@gmail.com wrote:
There must be something wrong in your app. Flash is supposed to use the browser to send http requests and thus Drupal should receive the session from the flash http request like it would for a normal http request from the browser.
Not if the flash application is using "FileReference" class to upload files. (damn... I opened the game and told you that I have a flash file uploader that uploads multiple files from a directory and have a progress bar for file uploading)
It's a bug in Flash 8 FileReference class that does not use the browser to send those requests, neither the cookies or even the browser identifier. Also, in Flash 8 we cannot pass extra data in the HTTP request or receive data from that request. I could use Flash 9 anyways... I just was trying to avoid that.
Anyway, you can use the standard url get syntax, like :
yoursite.com/node/5?session_id=yoursession_id
the part after ? will not harm Drupal (Drupal pager use the same syntax)
I hope that helps, but I fear that it won't, because sending the session like this will have no influence on the Drupal side. You should take a look at Drupal session handling, and see if it uses the same system as the built in php session handling (which appends a url query string when cookies are not available)
It seems to me that Drupal forces the use of session management through cookies.
Philippe
On 9/4/07, Fernando Silva fsilva.pt@gmail.com wrote:
Hi all,
I have a little module that inserts a flash application inside a drupal page. The problem is that when the flash interacts with the site, it does not obey to the session cookie and does not start the correct session.
Because I really cannot make the flash use, or send the correct cookie, the only option is by sending in the URL the session id.
Now the big problem is: how can I send in the URL the session id just for that path in a way Drupal understands and processes it?
Best regards, Fernando Silva -- [ Drupal support list | http://lists.drupal.org/ ]
-- [ Drupal support list | http://lists.drupal.org/ ]
Well if there's a bug in flash 8 for a crucial element in your app and it's fixed in flash 9 then it sounds to me like you've locked yourself into flash 9. I'm not sure why that's such a problem considering that according to adobe 90% of users support flash 9 (data as of june). Aside from that could you pass the session id as a flash param?
Fernando Silva wrote:
Hi Philippe,
On 9/4/07, Philippe Jadin philippe.jadin@gmail.com wrote:
There must be something wrong in your app. Flash is supposed to use the browser to send http requests and thus Drupal should receive the session from the flash http request like it would for a normal http request from the browser.
Not if the flash application is using "FileReference" class to upload files. (damn... I opened the game and told you that I have a flash file uploader that uploads multiple files from a directory and have a progress bar for file uploading)
It's a bug in Flash 8 FileReference class that does not use the browser to send those requests, neither the cookies or even the browser identifier. Also, in Flash 8 we cannot pass extra data in the HTTP request or receive data from that request. I could use Flash 9 anyways... I just was trying to avoid that.
Anyway, you can use the standard url get syntax, like :
yoursite.com/node/5?session_id=yoursession_id
the part after ? will not harm Drupal (Drupal pager use the same syntax)
I hope that helps, but I fear that it won't, because sending the session like this will have no influence on the Drupal side. You should take a look at Drupal session handling, and see if it uses the same system as the built in php session handling (which appends a url query string when cookies are not available)
It seems to me that Drupal forces the use of session management through cookies.
Philippe
On 9/4/07, Fernando Silva fsilva.pt@gmail.com wrote:
Hi all,
I have a little module that inserts a flash application inside a drupal page. The problem is that when the flash interacts with the site, it does not obey to the session cookie and does not start the correct session.
Because I really cannot make the flash use, or send the correct cookie, the only option is by sending in the URL the session id.
Now the big problem is: how can I send in the URL the session id just for that path in a way Drupal understands and processes it?
Best regards, Fernando Silva -- [ Drupal support list | http://lists.drupal.org/ ]
-- [ Drupal support list | http://lists.drupal.org/ ]
Yes, I can pass it. But the problem is: will Drupal use that param when I use it to callback a Drupal page?
Page1 -> flash (with session_id param) -> Page2?session_id
Anyway, it seems I'm going straight to Flash 9
On 9/4/07, sander-martijn sander@sander-martijn.com wrote:
Well if there's a bug in flash 8 for a crucial element in your app and it's fixed in flash 9 then it sounds to me like you've locked yourself into flash 9. I'm not sure why that's such a problem considering that according to adobe 90% of users support flash 9 (data as of june). Aside from that could you pass the session id as a flash param?
Fernando Silva wrote: Hi Philippe,
On 9/4/07, Philippe Jadin philippe.jadin@gmail.com wrote:
There must be something wrong in your app. Flash is supposed to use the browser to send http requests and thus Drupal should receive the session from the flash http request like it would for a normal http request from the browser.
Not if the flash application is using "FileReference" class to upload files. (damn... I opened the game and told you that I have a flash file uploader that uploads multiple files from a directory and have a progress bar for file uploading)
It's a bug in Flash 8 FileReference class that does not use the browser to send those requests, neither the cookies or even the browser identifier. Also, in Flash 8 we cannot pass extra data in the HTTP request or receive data from that request. I could use Flash 9 anyways... I just was trying to avoid that.
Anyway, you can use the standard url get syntax, like :
yoursite.com/node/5?session_id=yoursession_id
the part after ? will not harm Drupal (Drupal pager use the same syntax)
I hope that helps, but I fear that it won't, because sending the session like this will have no influence on the Drupal side. You should take a look at Drupal session handling, and see if it uses the same system as the built in php session handling (which appends a url query string when cookies are not available)
It seems to me that Drupal forces the use of session management through cookies.
Philippe
On 9/4/07, Fernando Silva fsilva.pt@gmail.com wrote:
Hi all,
I have a little module that inserts a flash application inside a drupal page. The problem is that when the flash interacts with the site, it does not obey to the session cookie and does not start the correct session.
Because I really cannot make the flash use, or send the correct cookie, the only option is by sending in the URL the session id.
Now the big problem is: how can I send in the URL the session id just for that path in a way Drupal understands and processes it?
Best regards, Fernando Silva -- [ Drupal support list | http://lists.drupal.org/ ]
-- [ Drupal support list | http://lists.drupal.org/ ]
-- ________________________________
sander-martijn interface developer | architect sander@sander-martijn.com www.sander-martijn.com ________________________________
-- [ Drupal support list | http://lists.drupal.org/ ]
On Tuesday 04 September 2007, Fernando Silva wrote:
I hope that helps, but I fear that it won't, because sending the session like this will have no influence on the Drupal side. You should take a look at Drupal session handling, and see if it uses the same system as the built in php session handling (which appends a url query string when cookies are not available)
It seems to me that Drupal forces the use of session management through cookies.
It does, yes. There are many reasons for it. Primarily, it used to support GET-based sessions but it kept breaking and converting cookie-capable users to GET-based sessions. GET-based sessions are inherently less secure easier to hijack, less user friendly, and less Google-friendly. They're bad news all around. Non-cookie sessions were removed in, I think, Drupal 4.7.
As others have said, if Flash 8 is buggy, sounds like a perfect excuse to use Flash 9. :-)
-
Fernando Silva -
Larry Garfield -
Philippe Jadin -
sander-martijn