Req #8855 [Opn->Csd]: session_start should return also FALSE
| From: | jani@php.net | Date: | Thu, 18 Nov 2010 23:30:38 +0000 |
| Subject: | Req #8855 [Opn->Csd]: session_start should return also FALSE | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-156192@lists.php.net to get a copy of this message | ||
Edit report at http://bugs.php.net/bug.php?id=8855&edit=1
ID: 8855
Updated by: jani@php.net
Reported by: sivasubraj at lycosmail dot com
Summary: session_start should return also FALSE
-Status: Open
+Status: Closed
Type: Feature/Change Request
-Package: Feature/Change Request
+Package: *General Issues
Operating System: Linux Mandrake 7.2
PHP Version: 4.0.4
-Assigned To:
+Assigned To: jani
Block user comment: N
Private report: N
New Comment:
Since 5.3.0 session_start() returns FALSE if starting fails.
Previous Comments:
------------------------------------------------------------------------
[2001-01-23 12:18:33] sivasubraj at lycosmail dot com
I feel that the feature I am going to describe is desirable for security
reasons:
The function session_start should return FALSE when the GET (or cookie)
requests to resume a non-esistent phpsession.
If there is already a (quick) way to prevent resuming non-esistent or
closed phpsessions, please let me know, else please, add the feature to
the TODO list.
(I've set session_cache_limiter('private') and I *don't* want to set it
to 'nocache').
Many thanks
Siva
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/bug.php?id=8855&edit=1