Req #35703 [Ana->Csd]: when session_name("123") consist only digits, should warning

Edit report at https://bugs.php.net/bug.php?id=35703&edit=1 ID: 35703 Updated by: yohgaki@php.net Reported by: samuelkid at citiz dot net Summary: when session_name("123") consist only digits, should warning -Status: Analyzed +Status: Closed Type: Feature/Change Request Package: *General Issues Operating System: redhat 7.3 PHP Version: 5.1.1 Assigned To: yohgaki Block user comment: N Private report: N New Comment: Automatic comment on behalf of yohgaki Revision: http://git.php.net/?p=php-src.git;a=commit;h=bfb4c3156fa68568a52d1c3c6b745b33088c2d46 Log: Fixed bug #35703: when session_name("123") consist only digits, should warning Previous Comments: ------------------------------------------------------------------------ [2013-06-27 10:27:40] yohgaki@php.net This is because session name is string, but session id name stored in $_COOKIE/$_GET/$_POST has long key. i.e. Cannot find session id with zend_hash_find() since it is numeric(long) key. session.name can be check in INI update function. ------------------------------------------------------------------------ [2005-12-16 10:39:21] samuelkid at citiz dot net Description: ------------ as php manual says: Session name can't consist only from digits, at least one letter must be present. Otherwise new session id is generated every time. http://php.liukang.com/manual/en/function.session-name.php so, when session("123"), it should be warning or something, but it is not Reproduce code: --------------- session_name("123") Expected result: ---------------- warning: or something Actual result: -------------- actually "123" works fine ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=35703&edit=1