Edit report at https://bugs.php.net/bug.php?id=70013&edit=1
ID: 70013
Updated by: mike@php.net
Reported by: jakub at zalas dot pl
Summary: Reference to $_SESSION is lost after a call to
session_regenerate_id()
Status: Open
Type: Bug
Package: Session related
Operating System: Debian
PHP Version: 7.0Git-2015-07-07 (Git)
Block user comment: N
Private report: N
New Comment:
Autocorrection FTW.
Of course I meant application developer and s/codes/code/
Previous Comments:
------------------------------------------------------------------------
[2015-07-11 06:38:01] mike@php.net
It may seem more reasonable from an implementors point of view, because you're looking at the C
codes, but definitely does not seem reasonable for an appointment developer.
This breaks userland in an very unintuitive way.
------------------------------------------------------------------------
[2015-07-10 14:53:19] laruence@php.net
I'd like mark this as won't fix.. the new behaviors seems more reasonable
------------------------------------------------------------------------
[2015-07-10 09:06:02] mike@php.net
+1, "deleting the session", if ever should mean on the backend under the old key; the data
will stay the same and a reference to it should be kept intact.
------------------------------------------------------------------------
[2015-07-09 09:16:17] tyrael@php.net
Bob: first of all, deleting the old session won't happen by default, so your definition is a
bit misleading, and also, from the "new" session will hold the same data only under a
different session id, so I think not many people would expect that the $_SESSION superglobal will be
recreated hence losing the reference.
if you add this to the fact that this is an undocumented behavior change I think we should consider
this a bug and fix it.
------------------------------------------------------------------------
[2015-07-08 15:10:45] bwoebi@php.net
It is a BC break, but I'm not sure if the behavior before was correct.
References should normally be broken up before deletionâ¦
And session_regenerate_id() is exactly that: delete old session, create new session.
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
https://bugs.php.net/bug.php?id=70013
--
Edit this bug report at https://bugs.php.net/bug.php?id=70013&edit=1