#42899 [Opn->Bgs]: problems with session_regenerate_id(true)
| From: | johannes@php.net | Date: | Tue, 09 Oct 2007 16:13:48 +0000 |
| Subject: | #42899 [Opn->Bgs]: problems with session_regenerate_id(true) | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-118325@lists.php.net to get a copy of this message | ||
ID: 42899
Updated by: johannes@php.net
Reported By: p dot nijs at xs4all dot nl
-Status: Open
+Status: Bogus
Bug Type: Session related
Operating System: Debian Etch
PHP Version: 5.2.4
New Comment:
Thank you for taking the time to write to us, but this is not
a bug. Please double-check the documentation available at
http://www.php.net/manual/ and the instructions on how to
report
a bug at http://bugs.php.net/how-to-report.php
Check the session.gc_* settings and docs
Previous Comments:
------------------------------------------------------------------------
[2007-10-09 09:58:17] p dot nijs at xs4all dot nl
Description:
------------
Session_regenerate_id(true) leaves a bunch of new sessions behind when
stress-testing by doing a continue page refresh (F5 in IE/Windows).
Reproduce code:
---------------
<?php
session_start();
$old_sessionid = session_id();
session_regenerate_id(true);
$new_sessionid = session_id();
echo "Old Session: $old_sessionid<br />";
echo "New Session: $new_sessionid<br />";
echo "Please look for the amount of newly created sessions in " .
session_save_path();
?>
Navigate to this file with your browser and hold F5 continuously for 5
seconds, triggering multiple refreshes after each other.
Expected result:
----------------
Only 1 session should be in the session_save_path (the newly generated
session only, the old ones should have been deleted).
Actual result:
--------------
Multiple sessions were created, it seems that the PHP-engine didn't
have the time(?) to delete the old sessions.
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=42899&edit=1