Re: cvs: php-src(PHP_4_3) / NEWS /ext/session session.c
| From: | Antony Dovgal | Date: | Tue, 07 Dec 2004 12:59:25 +0000 |
| Subject: | Re: cvs: php-src(PHP_4_3) / NEWS /ext/session session.c | ||
| References: | 1 2 3 4 | Groups: | php.cvs |
| Request: | Send a blank email to php-cvs+get-29463@lists.php.net to get a copy of this message | ||
On Tue, 7 Dec 2004 13:56:36 +0100 (CET)
Sascha Schumann <sascha@schumann.cx> wrote:
> On Tue, 7 Dec 2004, Antony Dovgal wrote:
>
> > On Tue, 7 Dec 2004 13:22:15 +0100 (CET)
> > Sascha Schumann <sascha@schumann.cx> wrote:
> >
> >> Please revert. It is intentional that a cookie is only sent
> >> when the client has not yet transferred the same session id
> >> to us using a cookie.
> >
> > 5.0 & 5.1 behave wrong then, as they send cookie on every
> > request [..]
>
> Yes, that is not the intended behaviour.
>
> > Probably, 5.0 & 5.1 branches should be fixed then or .. ?
>
> Indeed. I don't have time to watch every commit to the code,
> so this probably just slipped through. I'd appreciate it, if
> you could take care of 5.0 and 5.1 as well.
No problem, I'll do it.
I just wanted to know why the intended behaviour looks so strange:
setting session.cookie_lifetime to non-zero value leads to session invalidation in that time,
even if the session is active and the user is still working with it.
Do we *really* want it?
And why?
--
Wbr,
Antony Dovgal aka tony2001
tony2001@phpclub.net || antony@dovgal.com