Edit report at https://bugs.php.net/bug.php?id=72940&edit=1
ID: 72940
Updated by: yohgaki@php.net
Reported by: archinf at archinform dot de
Summary: SID always return "name=ID", even if session cookie
exists
Status: Open
Type: Bug
Package: Session related
PHP Version: 7.0.10
-Assigned To:
+Assigned To: yohgaki
Block user comment: N
Private report: N
New Comment:
It's oversight. However, IMHO SID should be always defined as it might break apps define SID
constant.
Previous Comments:
------------------------------------------------------------------------
[2016-08-25 11:00:42] archinf at archinform dot de
@cmb.php.net:
in bug #71974 session.use_trans_sid is set to 1 (in my case 0)
------------------------------------------------------------------------
[2016-08-25 10:54:26] archinf at archinform dot de
php.ini main session related settings:
session.save_handler = files
session.use_strict_mode = 0
session.use_cookies = 1
session.use_only_cookies = 0
session.name = ID
session.auto_start = 0
session.use_trans_sid = 0
------------------------------------------------------------------------
[2016-08-25 10:43:24] cmb@php.net
That might be related to bug #71974.
------------------------------------------------------------------------
[2016-08-25 10:18:12] archinf at archinform dot de
Description:
------------
---
From manual page: http://www.php.net/session.constants
---
SID:
Constant containing either the session name and session ID in the form of "name=ID" or
empty string if session ID was set in an appropriate session cookie.
This worked in all previous versions (up to 5.6), but after update to php7 SID even contains value
"name=ID" when a session cookie exists.
In my PHP code cookies are used for sessions as default and as fallback (if user disables Cookies)
session ID is transferred in the URL. But now the session ID is transferred everytime, because SID
always contains "name=ID"
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=72940&edit=1