Re: Forcing trans_sid on?
| From: | Jani Taskinen | Date: | Fri, 19 Oct 2001 01:06:55 +0000 |
| Subject: | Re: Forcing trans_sid on? | ||
| References: | 1 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-68286@lists.php.net to get a copy of this message | ||
AFAICT, it behaved like this before your patches.
At least lxr said so. :)
--Jani
On Thu, 18 Oct 2001, Zeev Suraski wrote:
>It could be a bug introduced by my patches from a couple of months ago
>(even though this behavior may have existed before, I'm not sure). I, at
>least, wasn't giving any thought to people who want to emit out SID's on
>their own.
>
>At 03:42 18-10-01, Rasmus Lerdorf wrote:
>>This code in session.c looks odd to me:
>>
>> if (!PS(use_cookies) && send_cookie) {
>> PS(apply_trans_sid) = 1;
>> send_cookie = 0;
>> }
>>
>>Basically what this says is that if session.use_cookies is off, trans_sid
>>will be automatically used regardless of the session.use_trans_sid
>>setting. This doesn't make sense to me. If I specially turn off
>>use_cookies and trans_sid in my php.ini file because I want to control
>>things using my own <?=SID?> tags trans_sid getting forced on screws me
>>over because it will add a second PHPSESSION=..... to every link. It
>>won't break my app, since multiply-defining the session id is ok, but it
>>sure makes my urls ugly.
>>
>>What was the logic behind forcing trans_sid on in that case instead of
>>using the current trans_sid setting?
>>
>>-Rasmus
>>
>>
>>--
>>PHP Development Mailing List <http://www.php.net/>
>>To unsubscribe, e-mail: php-dev-unsubscribe@lists.php.net
>>For additional commands, e-mail: php-dev-help@lists.php.net
>>To contact the list administrators, e-mail: php-list-admin@lists.php.net
>
>
>