Doc #55624 [Opn->Csd]: session_set_save_handler should mention locking

Edit report at https://bugs.php.net/bug.php?id=55624&edit=1 ID: 55624 Updated by: yohgaki@php.net Reported by: tyrael@php.net Summary: session_set_save_handler should mention locking -Status: Open +Status: Closed Type: Documentation Problem Package: Session related PHP Version: Irrelevant -Assigned To: +Assigned To: yohgaki Block user comment: N Private report: N New Comment: This is documented in session security section now. http://php.net/manual/en/features.session.security.management.php#features.session.security.management.session-locking Previous Comments: ------------------------------------------------------------------------ [2013-01-16 19:26:32] googleguy@php.net Related To: Bug #63278 ------------------------------------------------------------------------ [2011-09-06 17:41:10] tyrael@php.net Description: ------------ I've learned a couple of years ago the hard way that the default session handler uses locking(flock) for locking the session files, so there couldn't be two concurrent script execution with the same session id. However when people started using their own session handlers, they usually get the concept from the example in the php manual, which doesn't mention that what are the pros/cons for serializing the session execution. I would suggest to add the flock call to the example implementation, and add a note about the potential problems if no locking mechanism is implemented (potential dataloss, concurrent requests can overwrite each others data, that there is no guarantee that two ajax request will be served in the same order, etc.). heck, even the memcache ext (http://pecl.php.net/package-changelog.php? package=memcache) was bitten by this problem. ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=55624&edit=1