cvs: /phpdoc/functions session.sgml

sas Sat Sep 11 13:32:08 1999 EDT Modified files: /phpdoc/functions session.sgml Log: add new options Index: phpdoc/functions/session.sgml diff -u phpdoc/functions/session.sgml:1.3 phpdoc/functions/session.sgml:1.4 --- phpdoc/functions/session.sgml:1.3 Tue Aug 17 11:17:11 1999 +++ phpdoc/functions/session.sgml Sat Sep 11 13:32:08 1999 @@ -85,7 +85,7 @@ <listitem><simpara> <literal>session.auto_start</literal> specifies whether the session module start a session automatically on request startup. Defaults to - <literal>0</literal> (off). + <literal>0</literal> (disabled). <listitem><simpara> <literal>session.lifetime</literal> specifies the lifetime of the cookie @@ -106,6 +106,25 @@ <literal>session.gc_maxlifetime</literal> specifies the number of seconds after which data will be seen as 'garbage' and cleaned up. + <listitem><simpara> + <literal>session.extern_referer_check</literal> determinates whether + session ids referred to by external sites will be eliminated. If session + ids are propagated using the URL method, users not knowing about the + impact might publish session ids. This can lead to security problems + which this check tries to defeat. Defaults to <literal>0</literal>. + + <listitem><simpara> + <literal>session.entropy_file</literal> gives a path to an external + resource (file) which will be used as additional entropy source in the + session id creation process. Examples are <literal>/dev/random</literal> + or <literal>/dev/urandom</literal> which are available on many Unix + systems. + + <listitem><simpara> + <literal>session.entropy_length</literal> specifies the number of bytes + which will be read from the file specified above. Defaults to + <literal>0</literal> (disabled). + </itemizedlist> <note>