Bug #78858 [Com]: session_set_cookie_params() can't be used with php_admin_*
| From: | fgfgfgfdf at somewhere dot com | Date: | Fri, 22 Nov 2019 17:43:48 +0000 |
| Subject: | Bug #78858 [Com]: session_set_cookie_params() can't be used with php_admin_* | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-223861@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=78858&edit=1
ID: 78858
Comment by: fgfgfgfdf at somewhere dot com
Reported by: pajomasoma at gmail dot com
Summary: session_set_cookie_params() can't be used with
php_admin_*
Status: Open
Type: Bug
Package: PHP options/info functions
Operating System: Linux
PHP Version: 7.3.12
Block user comment: N
Private report: N
New Comment:
just don't use session_set_cookie_params() when you want to read and ther is
session_get_cookie_params()
Previous Comments:
------------------------------------------------------------------------
[2019-11-22 17:03:28] pajomasoma at gmail dot com
Description:
------------
session_set_cookie_params() fails if one of the setting below has been set by
php_admin_flag/php_admin_value, even if not trying to change them.
session.httponly
session.secure
session.samesite
Not clear if this is intended behavior. I expected to be able to use session_set_cookie_params() if
not trying to change from what was set by php_admin_flag/php_admin_value. Instead, it fails,
ignoring other values that could have been set (see test script for samesite setting example).
Test script:
---------------
// php_admin_flag[session.cookie_httponly] = on
// php_admin_flag[session.cookie_secure] = on
print_r($cookieParams = session_get_cookie_params());
$cookieParams['samesite'] = 'Lax';
var_dump(session_set_cookie_params($cookieParams));
print_r(session_get_cookie_params());
Expected result:
----------------
Array
(
[lifetime] => 0
[path] => /
[domain] =>
[secure] => 1
[httponly] => 1
[samesite] =>
)
bool(true)
Array
(
[lifetime] => 0
[path] => /
[domain] =>
[secure] => 1
[httponly] => 1
[samesite] => Lax
)
Actual result:
--------------
Array
(
[lifetime] => 0
[path] => /
[domain] =>
[secure] => 1
[httponly] => 1
[samesite] =>
)
bool(false)
Array
(
[lifetime] => 0
[path] => /
[domain] =>
[secure] => 1
[httponly] => 1
[samesite] =>
)
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=78858&edit=1