confusion over is_expired and is_empty in CGI:Session

[poolboi]

hey guys,
i'm not sure if u guys have place this problem before

i did an expiration of my CGI session for 1 min

and i got the code below to detect

if($session->is_expired)
  {
      print $cgi->header(-cache_control=>"no-cache, no-store, must-revalidate");
      print "<p>Your has session expired. Please login again.<p></br>";
      print "<a href='http://localhost//cgi-bin//mml%20log//login.pl'>Login</a>";
  }
  elsif ($session->is_empty)
  {
 
      print $cgi->header(-cache_control=>"no-cache, no-store, must-revalidate");
      print "You have not logged in";
  }
 

the problem is i know when the session expires, it deletes the session off
now when it expires instead of printing "your session expired"
it keeps printing you have not logged in

so i'm wondering if there's anything wrong with the is_expired function

[eWish]

is_expired()

Tests whether session initialized using load() is to be expired. This method works only on sessions initialized with load():

Are you using this function correclty?

--Kevin

[numberwhun]

Did you initialize the session using the load() function? If not, then using the is_expired() function is no use as it only works for sessions initialized with load();.

Regards,

Jeff

[poolboi]

yup i did
ok let me show u my logi script
ignore the ##username## and ##password## portion, i need to mask it off
so this is my log in page

#!/perl/bin/perl
 
use strict;
use DBI();
use CGI;
use CGI::Session(' ip_match ');
use Digest::SHA1 qw(sha1);
 
my ($dbh, $sth, $name1, $name2, $session);
 
my $cgi = new CGI;
 
my $username = $cgi->param('username');
my $password = $cgi->param('password');
 
if($username ne '')
{
$dbh = DBI->connect("DBI:mysql:database=authentication;host=localhost","##username##","##password##", 
              {RaiseError => 1});
 
$sth = $dbh ->prepare("SELECT * FROM `example` WHERE Username='$username' AND Password=SHA1('$password')");
$sth->execute();
while (my $ref =$sth->fetchrow_hashref()) {
$name1 = $ref->{'Username'}, $name2 = $ref->{'Password'};}
 
 
 
if ($username eq $name1 && ($username))
    {
       $session = new CGI::Session();
       print $session->header(-location=> "http://localhost//cgi-bin//mml%20log//element_select.pl");
    }
    else
    {
    print
    $cgi->header,
    $cgi->start_html(-title=>'StarHub Login');
 
print <<HTML;
<FORM METHOD="GET">
<div style="height100%; width100%; z-index:-1; position:absolute; top:0px; bottom:0px">
<IMG SRC="C:\\Program Files\\Apache Software Foundation\\Apache2.2\\
                        htdocs\\starhub1024by768.jpg" ALT="starhub">
</div>
<div style="position:absolute; top:223px"> 
<p>You have Entered an Incorrect password or username</p>
<p>Please Log in below:</p>
<p>Username: <INPUT TYPE=TEXT NAME="username"></p>
<p>Password: <INPUT TYPE=PASSWORD NAME="password"></p></br>
<INPUT TYPE=SUBMIT name=QUERY2 value="Log In"> 
<a href="http://localhost//cgi-bin//mml%20log//passwordchange.pl">Forget your Password?</a>
</div>
</FORM>
HTML
 
print $cgi->end_html();
 
    }
$dbh->disconnect();
 
}
elsif($cgi->param('action') eq 'logout')
     {
     $session = CGI::Session->load() or die CGI::Session->errstr;
           $session->delete();
           print $session->header(-location=>"http://localhost//cgi-bin//mml%20log//login.pl");
     }
     else
     {    
 
print
    $cgi->header,
    $cgi->start_html(-title=>'StarHub Login');
 
print <<HTML;
<FORM METHOD="GET">
<div style="height100%; width100%; z-index:-1; position:absolute; top:0px; bottom:0px">
<IMG SRC="C:\\Program Files\\Apache Software Foundation\\Apache2.2\\
                        htdocs\\starhub1024by768.jpg" ALT="starhub">
</div>
<div style="position:absolute; top:223px"> 
<p>Please Log in below:</p>
<p>Username: <INPUT TYPE=TEXT NAME="username"></p>
<p>Password: <INPUT TYPE=PASSWORD NAME="password"></p></br>
<INPUT TYPE=SUBMIT name=QUERY2 value="Log In"> 
</div>
</FORM>
HTML
 
print $cgi->end_html();
}
 

if login successful
i direct it to this script

#!/perl/bin/perl
 
use strict;
use DBI();
use CGI;
use CGI::Session(' ip_match ');
 
 
my $session;
 
my $cgi = new CGI;
$session = CGI::Session->load();
 
my $mmloption = $cgi->param('mmloption');
 
 
if($session->is_expired)
  {
      print $cgi->header(-cache_control=>"no-cache, no-store, must-revalidate");
      print "<p>Your has session expired. Please login again.<p></br>";
      print "<a href='http://localhost//cgi-bin//mml%20log//login.pl'>Login</a>";
  }
  elsif ($session->is_empty)
  {
 
      print $cgi->header(-cache_control=>"no-cache, no-store, must-revalidate");
      print "You have not logged in";
  }
  else
  {
 
 
if ($mmloption eq "1")
{
    print $cgi->header(-type=>"text/html",-location=>"http://localhost//cgi-bin//mml%20log//1//optionA.pl");
}
elsif ($mmloption eq "12") 
{
 
    print $cgi->header(-type=>"text/html",-location=>"http://localhost//cgi-bin//mml%20log//12//optionA.pl");
}
elsif ($mmloption eq "123")
{
    print $cgi->header(-type=>"text/html",-location=>"http://localhost//cgi-bin//mml%20log//123//optionA.pl");
}
 
elsif ($mmloption eq "1234")
{
    print $cgi->header(-type=>"text/html",-location=>"http://localhost//cgi-bin//mml%20log//1234//optionA.pl");
}
else
{
 
 
 
print
    $cgi->header,
    $cgi->start_html(-title=>'Elements Selection');
 
print <<HTML;
 
<FORM METHOD="GET">
<div style="height100%; width100%; z-index:-1; position:absolute; top:0px; bottom:0px">
<IMG SRC="C:\\Program Files\\Apache Software Foundation\\Apache2.2\\
                        htdocs\\starhub1024by768.jpg" ALT="starhub">
</div>
<div style="position:absolute; top:223px"> 
<p>Please Select the elements below:</p>
<INPUT TYPE=RADIO NAME="mmloption" VALUE="12">12<BR></br>
<INPUT TYPE=RADIO NAME="mmloption" VALUE="1">1<BR></br>
 
<input type=submit name=Query3 value=Submit>
<a href='http://localhost//cgi-bin//mml%20log//login.pl?action=logout'>Logout</a>
</div>
 
HTML
 
print $cgi->end_html();
}
}
 

hopefully i did it correctly

[numberwhun]

In your original post, you said you set the expiration to 1 minute. I looked through what you posted and I don't see it. I don't see where you used the expire() function to set the 1 minute time-out.

Regards,

Jeff

[poolboi]

opps sorry

#!/perl/bin/perl
 
use strict;
use DBI();
use CGI;
use CGI::Session(' ip_match ');
use Digest::SHA1 qw(sha1);
 
my ($dbh, $sth, $name1, $name2, $session);
 
my $cgi = new CGI;
 
my $username = $cgi->param('username');
my $password = $cgi->param('password');
 
if($username ne '')
{
$dbh = DBI->connect("DBI:mysql:database=authentication;host=localhost","##username##","##password##", 
              {RaiseError => 1});
 
$sth = $dbh ->prepare("SELECT * FROM `example` WHERE Username='$username' AND Password=SHA1('$password')");
$sth->execute();
while (my $ref =$sth->fetchrow_hashref()) {
$name1 = $ref->{'Username'}, $name2 = $ref->{'Password'};}
 
 
 
if ($username eq $name1 && ($username))
    {
       $session = new CGI::Session();
        $session->expire("1m");
       print $session->header(-location=> "http://localhost//cgi-bin//mml%20log//element_select.pl");
    }
    else
    {
    print
    $cgi->header,
    $cgi->start_html(-title=>'StarHub Login');
 
print <<HTML;
<FORM METHOD="GET">
<div style="height100%; width100%; z-index:-1; position:absolute; top:0px; bottom:0px">
<IMG SRC="C:\\Program Files\\Apache Software Foundation\\Apache2.2\\
                        htdocs\\starhub1024by768.jpg" ALT="starhub">
</div>
<div style="position:absolute; top:223px"> 
<p>You have Entered an Incorrect password or username</p>
<p>Please Log in below:</p>
<p>Username: <INPUT TYPE=TEXT NAME="username"></p>
<p>Password: <INPUT TYPE=PASSWORD NAME="password"></p></br>
<INPUT TYPE=SUBMIT name=QUERY2 value="Log In"> 
<a href="http://localhost//cgi-bin//mml%20log//passwordchange.pl">Forget your Password?</a>
</div>
</FORM>
HTML
 
print $cgi->end_html();
 
    }
$dbh->disconnect();
 
}
elsif($cgi->param('action') eq 'logout')
     {
     $session = CGI::Session->load() or die CGI::Session->errstr;
         $session->delete();
         print $session->header(-location=>"http://localhost//cgi-bin//mml%20log//login.pl");
     }
     else
     {  
 
print
    $cgi->header,
    $cgi->start_html(-title=>'StarHub Login');
 
print <<HTML;
<FORM METHOD="GET">
<div style="height100%; width100%; z-index:-1; position:absolute; top:0px; bottom:0px">
<IMG SRC="C:\\Program Files\\Apache Software Foundation\\Apache2.2\\
                        htdocs\\starhub1024by768.jpg" ALT="starhub">
</div>
<div style="position:absolute; top:223px"> 
<p>Please Log in below:</p>
<p>Username: <INPUT TYPE=TEXT NAME="username"></p>
<p>Password: <INPUT TYPE=PASSWORD NAME="password"></p></br>
<INPUT TYPE=SUBMIT name=QUERY2 value="Log In"> 
</div>
</FORM>
HTML
 
print $cgi->end_html();
}
 
 

sorry i added it in
i tried with that but it still didn;t work

[numberwhun]

Unfortunately, I don't know why its not working then. The use would seem correct, but I just don't know. Wish I could help more, sorry.

Regards,

Jeff

[poolboi]

hm...all i know is if a session expires
the session is deleted and becomes empty
perhaps that;s why it always detect it is an empty session
i've read some issues on this, apparently it's said to be a bug in the module
but no proven evidence yet