Bug #66469 [Opn->Csd]: PHP creates two session ids when using strict mode

From: Date: Fri, 17 Jan 2014 03:37:55 +0000
Subject: Bug #66469 [Opn->Csd]: PHP creates two session ids when using strict mode
References: 1  Groups: php.bugs 
Request: Send a blank email to php-bugs+get-183854@lists.php.net to get a copy of this message
Edit report at https://bugs.php.net/bug.php?id=66469&edit=1 ID: 66469 Updated by: yohgaki@php.net Reported by: oz at zend dot com Summary: PHP creates two session ids when using strict mode -Status: Open +Status: Closed Type: Bug Package: Session related Operating System: All PHP Version: 5.5.8 -Assigned To: +Assigned To: yohgaki Block user comment: N Private report: N New Comment: Thank you, kaplan. The commit is the fix. I don't know why the link shows patch applicable only to 5.6 branch, though. (It's not in 5.5 branch) Closing. Previous Comments: ------------------------------------------------------------------------ [2014-01-15 14:33:44] kaplan@php.net This commit might be relevant for this bug: http://git.php.net/?p=php-src.git;a=commitdiff;h=167eaedcbdb494c87c4f83d2897a9fdb614e7062 ------------------------------------------------------------------------ [2014-01-12 08:28:12] oz at zend dot com Description: ------------ When you enable the strict mode and then you execute session_start() without supplying a PHPSESSID (using php-cgi, cli, or ApacheBench for example), PHP creates two session ids and returns two SetCookie headers with both session ids. I believe the second session id can be avoided since PHP knows it just created the session id for the first time. Test script: --------------- <?php ini_set("session.use_strict_mode", "1"); ini_set("session.save_handler", "files"); session_start(); ?> Expected result: ---------------- " Set-Cookie: PHPSESSID=k6brqpp9rnh2ajo2tch4l68t84; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-type: text/html " Actual result: -------------- " Set-Cookie: PHPSESSID=k1hn6r22om8kiq60nq72hhsa52; path=/ Set-Cookie: PHPSESSID=k6brqpp9rnh2ajo2tch4l68t84; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Content-type: text/html " ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=66469&edit=1

« previous php.bugs (#183854) next »