Bug #70013 [Asn]: Reference to $_SESSION is lost after a call to session_regenerate_id()

From:	yohgaki@php.net	Date:	Mon, 13 Jul 2015 02:21:26 +0000
Subject:	Bug #70013 [Asn]: Reference to $_SESSION is lost after a call to session_regenerate_id()
References:	1	Groups:	php.bugs
Request:	Send a blank email to php-bugs+get-194367@lists.php.net to get a copy of this message

Edit report at https://bugs.php.net/bug.php?id=70013&edit=1

 ID:                 70013
 Updated by:         yohgaki@php.net
 Reported by:        jakub at zalas dot pl
 Summary:            Reference to $_SESSION is lost after a call to
                     session_regenerate_id()
 Status:             Assigned
 Type:               Bug
 Package:            Session related
 Operating System:   Debian
 PHP Version:        7.0Git-2015-07-07 (Git)
 Assigned To:        yohgaki
 Block user comment: N
 Private report:     N

 New Comment:

So what should I do? Restore old behavior or not?


Previous Comments:
------------------------------------------------------------------------
[2015-07-11 20:44:59] ab@php.net

Hi,

I guess we should revert the change to PHP5 behavior. Please do a proof read of

https://wiki.php.net/rfc/session-lock-ini
http://grokbase.com/t/php/php-internals/142dbaan9h/vote-rfc-introduce-session-start-options-read-only-unsafe-lock-lazy-write-and-lazy-destroy

and also bug #65746. This behavior change is a subset of the mentioned RFC which had major concerns
and was declined. Until a proper solution is suggested and accepted, there is no reason to go for BC
breaks.

Thanks.

------------------------------------------------------------------------
[2015-07-11 06:39:55] mike@php.net

Autocorrection FTW.

Of course I meant application developer and s/codes/code/

------------------------------------------------------------------------
[2015-07-11 06:38:01] mike@php.net

It may seem more reasonable from an implementors point of view, because you're looking at the C
codes, but definitely does not seem reasonable for an appointment developer.

This breaks userland in an very unintuitive way.

------------------------------------------------------------------------
[2015-07-10 14:53:19] laruence@php.net

I'd like mark this as won't fix.. the new behaviors seems more reasonable

------------------------------------------------------------------------
[2015-07-10 09:06:02] mike@php.net

+1, "deleting the session", if ever should mean on the backend under the old key; the data
will stay the same and a reference to it should be kept intact.

------------------------------------------------------------------------


The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at

    https://bugs.php.net/bug.php?id=70013


--
Edit this bug report at https://bugs.php.net/bug.php?id=70013&edit=1


   

Thread (16 messages)

• jakub at zalas dot plTue, 07 Jul 2015 23:44:04 +0000
  • stloyd at o2 dot plWed, 08 Jul 2015 07:06:53 +0000Bug #70013 [Com]: Reference to $_SESSION is lost after a call to session_regenerate_id()
  • bwoebi@php.netWed, 08 Jul 2015 15:10:46 +0000Bug #70013 [Opn]: Reference to $_SESSION is lost after a call to session_regenerate_id()
  • tyrael@php.netThu, 09 Jul 2015 09:16:18 +0000Bug #70013 [Opn]: Reference to $_SESSION is lost after a call to session_regenerate_id()
  • mike@php.netFri, 10 Jul 2015 09:06:03 +0000Bug #70013 [Opn]: Reference to $_SESSION is lost after a call to session_regenerate_id()
  • laruence@php.netFri, 10 Jul 2015 14:53:20 +0000Bug #70013 [Opn]: Reference to $_SESSION is lost after a call to session_regenerate_id()
  • mike@php.netSat, 11 Jul 2015 06:38:02 +0000Bug #70013 [Opn]: Reference to $_SESSION is lost after a call to session_regenerate_id()
  • mike@php.netSat, 11 Jul 2015 06:39:56 +0000Bug #70013 [Opn]: Reference to $_SESSION is lost after a call to session_regenerate_id()
  • ab@php.netSat, 11 Jul 2015 20:45:01 +0000Bug #70013 [Opn]: Reference to $_SESSION is lost after a call to session_regenerate_id()
  • yohgaki@php.netMon, 13 Jul 2015 02:21:26 +0000Bug #70013 [Asn]: Reference to $_SESSION is lost after a call to session_regenerate_id()
  • kalle@php.netMon, 13 Jul 2015 16:09:40 +0000Bug #70013 [Asn]: Reference to $_SESSION is lost after a call to session_regenerate_id()
  • ab@php.netTue, 21 Jul 2015 09:47:50 +0000Bug #70013 [Asn]: Reference to $_SESSION is lost after a call to session_regenerate_id()
  • ab@php.netSat, 08 Aug 2015 22:15:47 +0000Bug #70013 [Asn]: Reference to $_SESSION is lost after a call to session_regenerate_id()
  • yohgaki@php.netSun, 06 Sep 2015 05:53:27 +0000Bug #70013 [Asn]: Reference to $_SESSION is lost after a call to session_regenerate_id()
  • yohgaki@php.netSun, 06 Sep 2015 18:58:16 +0000Bug #70013 [Asn->Csd]: Reference to $_SESSION is lost after a call to session_regenerate_id()
  • ab@php.netTue, 15 Sep 2015 06:22:53 +0000Bug #70013 [Csd]: Reference to $_SESSION is lost after a call to session_regenerate_id()