#31369 [NEW]: session_destroy() and/or session_write_close() should unregister URL handler
| From: | baafie at planet dot nl | Date: | Fri, 31 Dec 2004 15:33:50 +0000 |
| Subject: | #31369 [NEW]: session_destroy() and/or session_write_close() should unregister URL handler | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-71357@lists.php.net to get a copy of this message | ||
From: baafie at planet dot nl
Operating system: Linux Red hat 9 -2.4.20
PHP version: 4.3.10
PHP Bug Type: Session related
Bug description: session_destroy() and/or session_write_close() should unregister URL handler
Description:
------------
According to the php manual, session_start() will register internal output
handler for URL rewriting when trans-sid is enabled. Should
session_destroy() and/or session_write_close() not unregister this
handler?
Reproduce code:
---------------
<?php
ini_set ('session.use_trans_sid','1');
session_start();
echo '<a href="index.php">a page</a>\n';
session_destroy();
echo '<a href="index.php">a page</a>';
?>
Expected result:
----------------
Only the link that was printed before session_destroy() should contain the
session ID:
<a href="index.php?PHPSESSID=2382309823823...">a page</a>
<a href="index.php">a page</a>
Actual result:
--------------
Both URLs contain the session ID;
<a href="index.php?PHPSESSID=2382309823823...">a page</a>
<a href="index.php?PHPSESSID=2382309823823...">a page</a>
--
Edit bug report at http://bugs.php.net/?id=31369&edit=1
--
Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=31369&r=trysnapshot4
Try a CVS snapshot (php5.0): http://bugs.php.net/fix.php?id=31369&r=trysnapshot50
Try a CVS snapshot (php5.1): http://bugs.php.net/fix.php?id=31369&r=trysnapshot51
Fixed in CVS: http://bugs.php.net/fix.php?id=31369&r=fixedcvs
Fixed in release: http://bugs.php.net/fix.php?id=31369&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=31369&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=31369&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=31369&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=31369&r=support
Expected behavior: http://bugs.php.net/fix.php?id=31369&r=notwrong
Not enough info: http://bugs.php.net/fix.php?id=31369&r=notenoughinfo
Submitted twice: http://bugs.php.net/fix.php?id=31369&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=31369&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=31369&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=31369&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=31369&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=31369&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=31369&r=float
No Zend Extensions: http://bugs.php.net/fix.php?id=31369&r=nozend
MySQL Configuration Error: http://bugs.php.net/fix.php?id=31369&r=mysqlcfg