session & iframe

Question

I have a site with an iframe. Booth, the site and the site in the iframe are checking $_SESSION["login"]. So if the Session gets expiered the user will be logged out.

Problem: When the user hangs around the site for some time and the session gets expiered the login-page will appear in the iframe. (for example he clicks a link with target="iframe") I want the login-page to appear in the parent.

Possible?

Have you considered using something other than an IFRAME to display your sub-content? http://stackoverflow.com/questions/2102878/better-alternative-to-an-iframe - Not sure, but I think loading your page into a DIV via AJAX will make it so some forms of redirect will redirect the whole page instead of just the sub-page, as the browser will (sort of) treat it all as one page. See also: http://stackoverflow.com/questions/4213122/reload-page-from-ajax-loaded-subpage — Merlyn Morgan-Graham, Dec 06 '11 at 09:54

score 2 · Answer 1 · answered Dec 06 '11 at 09:46

2

If you can use Javascript, use top to access the top parent page, and for instance redirect it to the login page.

answered Dec 06 '11 at 09:46

Mic

24,812
9
57
70

score 2 · Accepted Answer · answered Dec 06 '11 at 09:57

2

try this:

<?php 
   if(!isset($_SESSION["login"]))
   {
?>
<script>
   if(self.location.href != top.location.href){
       top.location = '/login.php';
   }
</script>
<?php
   }
?>

answered Dec 06 '11 at 09:57

jerjer

8,694
30
36

score 1 · Answer 3 · answered Dec 06 '11 at 09:48

If session expire time is not mandatory, why not set the session to not expire until the browser is closed?

<?php ini_set("session.gc_lifetime","0"); ?>

this setting sets that the session will not expire until the browser is closed. If you have access to php.ini you can set that to default

score 1 · Answer 4 · answered Dec 06 '11 at 09:51

Add a check to your login page wheter or not it is loaded inside the iframe, like so:

var isInIFrame = (window.location != window.parent.location) ? true : false;

If it evaluates to true, try reloading the page in the top window, like so:

window.top.location.href="/login.php"

session & iframe

4 Answers4