#42899 [NEW]: problems with session_regenerate_id(true)
| From: | p dot nijs at xs4all dot nl | Date: | Tue, 09 Oct 2007 09:58:18 +0000 |
| Subject: | #42899 [NEW]: problems with session_regenerate_id(true) | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-118317@lists.php.net to get a copy of this message | ||
From: p dot nijs at xs4all dot nl
Operating system: Debian Etch
PHP version: 5.2.4
PHP Bug Type: Session related
Bug description: problems with session_regenerate_id(true)
Description:
------------
Session_regenerate_id(true) leaves a bunch of new sessions behind when
stress-testing by doing a continue page refresh (F5 in IE/Windows).
Reproduce code:
---------------
<?php
session_start();
$old_sessionid = session_id();
session_regenerate_id(true);
$new_sessionid = session_id();
echo "Old Session: $old_sessionid<br />";
echo "New Session: $new_sessionid<br />";
echo "Please look for the amount of newly created sessions in " .
session_save_path();
?>
Navigate to this file with your browser and hold F5 continuously for 5
seconds, triggering multiple refreshes after each other.
Expected result:
----------------
Only 1 session should be in the session_save_path (the newly generated
session only, the old ones should have been deleted).
Actual result:
--------------
Multiple sessions were created, it seems that the PHP-engine didn't have
the time(?) to delete the old sessions.
--
Edit bug report at http://bugs.php.net/?id=42899&edit=1
--
Try a CVS snapshot (PHP 4.4): http://bugs.php.net/fix.php?id=42899&r=trysnapshot44
Try a CVS snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=42899&r=trysnapshot52
Try a CVS snapshot (PHP 6.0): http://bugs.php.net/fix.php?id=42899&r=trysnapshot60
Fixed in CVS: http://bugs.php.net/fix.php?id=42899&r=fixedcvs
Fixed in release: http://bugs.php.net/fix.php?id=42899&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=42899&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=42899&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=42899&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=42899&r=support
Expected behavior: http://bugs.php.net/fix.php?id=42899&r=notwrong
Not enough info: http://bugs.php.net/fix.php?id=42899&r=notenoughinfo
Submitted twice: http://bugs.php.net/fix.php?id=42899&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=42899&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=42899&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=42899&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=42899&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=42899&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=42899&r=float
No Zend Extensions: http://bugs.php.net/fix.php?id=42899&r=nozend
MySQL Configuration Error: http://bugs.php.net/fix.php?id=42899&r=mysqlcfg