cvs: php4 / php.ini-dist php.ini-recommended
| From: | Markus Fischer | Date: | Sun, 16 Jun 2002 06:05:24 +0000 |
| Subject: | cvs: php4 / php.ini-dist php.ini-recommended | ||
| Groups: | php.cvs | ||
| Request: | Send a blank email to php-cvs+get-12374@lists.php.net to get a copy of this message | ||
mfischer Sun Jun 16 02:05:24 2002 EDT
Modified files:
/php4 php.ini-dist php.ini-recommended
Log:
- List new session.use_only_cookies option.
Index: php4/php.ini-dist
diff -u php4/php.ini-dist:1.129 php4/php.ini-dist:1.130
--- php4/php.ini-dist:1.129 Mon Jun 10 16:00:20 2002
+++ php4/php.ini-dist Sun Jun 16 02:05:21 2002
@@ -725,6 +725,9 @@
; Whether to use cookies.
session.use_cookies = 1
+; This option enables administrators to make their users invulnerable to
+; attacks which involve passing session ids in URLs; defaults to 0.
+; session.use_only_cookies = 1
; Name of the session (used as cookie name).
session.name = PHPSESSID
Index: php4/php.ini-recommended
diff -u php4/php.ini-recommended:1.82 php4/php.ini-recommended:1.83
--- php4/php.ini-recommended:1.82 Mon Jun 10 16:00:20 2002
+++ php4/php.ini-recommended Sun Jun 16 02:05:23 2002
@@ -732,6 +732,9 @@
; Whether to use cookies.
session.use_cookies = 1
+; This option enables administrators to make their users invulnerable to
+; attacks which involve passing session ids in URLs; defaults to 0.
+; session.use_only_cookies = 1
; Name of the session (used as cookie name).
session.name = PHPSESSID