php session serialization

Question

I have one server with php5.3 + nginx + php-fpm and second server with php5.3 + apache2. On both server in php.ini - session.serialize_handler = php. And on first server session is serializing like this:

onlineuser|a:2:{s:4:"user";O:8:"stdClass":81:{s:12:"category_ids";s:1:"2";s:2:"id";i:114756;s:5:"utype";i:2;s:6:"passwd";s:32:"...";.......}

And on second server session is serializing like this:

kP_xItrmVGDX_QFX-49QcYMf0nfnkEZrLSCLhypvPais0DkcFol7zblcQv_U2ET8X_ygrBglUuSGtH9T87nnE-5Nge3sFE0hdF6ZzO1Ba8mu12DAil5a18EPZAW3sb5tEELqaQK5ByGkomONxGUjmdSFkph4pMZR_2Dkg714SK7Wdh5ZZacdiZrGUXt4...............

It's look like serialization methods are different. Please advice how found out reason of this.

Answer 1

Seems like you have Suhosin PHP extension installed at 2nd server. If yes, set the parameter "suhosin.session.encrypt" to "Off" in it's php.ini