That makes sense. To rehash for my own understanding the cookie should technically exist on the client's disk. However, I need to check for it at each page I want to restrict access too. When it finds the cookie it then creates a new session with the old parameters.

My next questions is how do I retrieve those old values since technically it could be looking for any CGISESSID that has been loaded. In other words, is it imperative that I pass CGISESSID to/between each html/cgi document that the client visits? I am using the following (updated) code to store and retrieve cookies: 

sub setCookie($) {
   my($session) = @_;
   my $q = new CGI;
   $sid = $session->id();
   $cookie = $q->cookie(-name => "CGISESSID",
                        -value => $sid,
                        -expires => '+1h',
            -path => '/tmp/Sessions');
   print $q->header(-cookie=>$cookie);
}

sub retrieveSession() {
    $query = new CGI;
    $sid = $query->cookie("CGISESSID") || undef;
    $session = new CGI::Session(undef, $sid, {Directory=>'/tmp/Session
+s'});
    $sid = $session->id();
    $session = getUser($sid);    
    print $session->param("log_name");
    return $session;
}

sub getUser($) {
   my ($sid) = @_;
   $select = "SELECT username, password FROM Employees WHERE session_i
+d = '$sid'";
   $get_it = $db->prepare($select);
   $get_it->errstr, "\n";
   $rv = $get_it->execute() or die "Couldn't execute query '$select' \
+n";
   $get_it->bind_columns(undef, \$username, \$password); 
   $get_it->fetchrow_arrayref();   
   $session->param(-name=>"log_name", -value=>$username); $session->pa
+ram(-name=>"log_password", -value=>$password);   
   return $session;
}

[download]
Even though I have a cookie stored on disk that I can see the getUser and retrieveSession functions are not working properly. I would think that I wouldn't need to append cgisess_ to the beginning of the session id like cgisess_a983c8302e7a678a2e53c65e8bd3316 because it should take care of this automatically? Any other ideas? Thanks once again for helping out!

In reply to Re^2: CGI::Session Handling by intranetman
in thread CGI::Session Handling by intranetman

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.