problem with shared SSL and sessions

[eddman]

I'm trying to install a new payment module (made by a Swedish company, Pay and Read). Everything works fine just until the final confirmation of the order. When the customer klicks the last confirmation (stef 4 of 4), he is oddly back to login.php instead of the success order confirmation page. Example of what is shown in the browsers addess field: https://www.wopsa3.com/~xxxx/kite/lo...fe655942a6861e

And the error message that are display on the bottom of the page is:

1062 - Duplicate entry '7e6649d31ad556c767542914a37b025e' for key 1

insert into sessions values ('7e6649d31ad556c767542914a37b025e?sessionId=XJW7r gHp4GgRaVaUuRG3TAS3Sam7B92Mc7b30c0ec47af06e6afe655 942a6861e', '1093372575', 'cart|O:12:\"shoppingcart\":4:{s:8:\"contents\";a: 0:{}s:5:\"total\";i:0;s:6:\"weight\";i:0;s:12:\"co ntent_type\";b:0;}language|s:7:\"svenska\";languag es_id|s:1:\"4\";currency|s:3:\"SEK\";navigation|O: 17:\"navigationhistory\":2:{s:4:\"path\";a:1:{i:0; a:4:{s:4:\"page\";s:9:\"login.php\";s:4:\"mode\";s :3:\"SSL\";s:3:\"get\";a:1:{s:6:\"osCsid\";s:107:\ "7e6649d31ad556c767542914a37b025e?sessionId=XJW7rg Hp4GgRaVaUuRG3TAS3Sam7B92Mc7b30c0ec47af06e6afe6559 42a6861e\";}s:4:\"post\";a:0:{}}}s:8:\"snapshot\"; a:0:{}}')

this is shown two times the second one below the first one, and then this line is displayd:
[TEP STOP]


Warning: Unknown(): A session is active. You cannot change the session module's ini settings at this time. in Unknown on line 0

I've tried to change the settings in admin/configuration/sessions but it doesn't change anything. Now everything is set to 'false'.

This is how my includes/configure.php looks like (a piece of it):

define('HTTP_SERVER', 'http://www.xxxx.se/kite');
define('HTTPS_SERVER', 'https://www.wopsa3.com/~xxxx/kite');
define('ENABLE_SSL', true);
define('HTTP_COOKIE_DOMAIN', 'http://www.xxxx.se/kite');
define('HTTPS_COOKIE_DOMAIN', 'https://www.wopsa3.com/~xxxx/kite');
define('HTTP_COOKIE_PATH', '/');
define('HTTPS_COOKIE_PATH', '/');
define('DIR_WS_HTTP_CATALOG', '/');
define('DIR_WS_HTTPS_CATALOG', '/');



any ideas?

///eddman

[Arpit]

shared hosting sure does create alot of headaches...
if you look at ur configure.php, your cookie domains for http and https point to two different servers even though one might think its on the same server,

define('HTTP_COOKIE_DOMAIN', 'http://www.xxxx.se/kite');
define('HTTPS_COOKIE_DOMAIN', 'https://www.wopsa3.com/~xxxx/kite');

if you match your http cookie domain with the https cookie domain, you should be set,

define('HTTP_COOKIE_DOMAIN', 'http://www.wopsa3.com/xxxx.se/kite'); 
define('HTTPS_COOKIE_DOMAIN', 'https://www.wopsa3.com/~xxxx/kite');

[eddman]

Thanks for the reply Arpit!

i changed the lines to:

define('HTTP_COOKIE_DOMAIN', 'http://www.wopsa3.com/~teese22/kite');
define('HTTPS_COOKIE_DOMAIN', 'https://www.wopsa3.com/~teese22/kite');

however now, I get this error message:

Warning: session_start(): Cannot send session cookie - headers already sent by (output started at /home/teese22/public_html/kite/includes/configure.php:46) in /home/teese22/public_html/kite/includes/functions/sessions.php on line 67

Warning: session_start(): Cannot send session cache limiter - headers already sent (output started at /home/teese22/public_html/kite/includes/configure.php:46) in /home/teese22/public_html/kite/includes/functions/sessions.php on line 67

The error message is displayed above the page and is there right from the beginning when reading index.php

any ideas?

[Arpit]

im sorry, i think we have a little miscommunication....
lets say ur domain name is: myshop.com

then your cookie domain paths should look like,

define('HTTP_COOKIE_DOMAIN', 'http://www.wopsa3.com/myshop.com)';
define('HTTPS_COOKIE_DOMAIN', 'https://www.wopsa3.com/myshop.com');