Re: Forcing trans_sid on?
| From: | Zeev Suraski | Date: | Thu, 18 Oct 2001 09:33:28 +0000 |
| Subject: | Re: Forcing trans_sid on? | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-68205@lists.php.net to get a copy of this message | ||
It could be a bug introduced by my patches from a couple of months ago (even though this behavior may have existed before, I'm not sure). I, at least, wasn't giving any thought to people who want to emit out SID's on their own.
At 03:42 18-10-01, Rasmus Lerdorf wrote:
This code in session.c looks odd to me:
if (!PS(use_cookies) && send_cookie) {
PS(apply_trans_sid) = 1;
send_cookie = 0;
}
Basically what this says is that if session.use_cookies is off, trans_sid
will be automatically used regardless of the session.use_trans_sid
setting. This doesn't make sense to me. If I specially turn off
use_cookies and trans_sid in my php.ini file because I want to control
things using my own <?=SID?> tags trans_sid getting forced on screws me
over because it will add a second PHPSESSION=..... to every link. It
won't break my app, since multiply-defining the session id is ok, but it
sure makes my urls ugly.
What was the logic behind forcing trans_sid on in that case instead of
using the current trans_sid setting?
-Rasmus
--
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, e-mail: php-dev-unsubscribe@lists.php.net
For additional commands, e-mail: php-dev-help@lists.php.net
To contact the list administrators, e-mail: php-list-admin@lists.php.net