#48237 [Opn->Csd]: Documentation needs clarification

ID: 48237 Updated by: bjori@php.net Reported By: dlo at rottentomatoes dot com -Status: Open +Status: Closed Bug Type: Documentation problem PHP Version: Irrelevant New Comment: This bug has been fixed in the documentation's XML sources. Since the online and downloadable versions of the documentation need some time to get updated, we would like to ask you to be a bit patient. Thank you for the report, and for helping us make our documentation better. Previous Comments: ------------------------------------------------------------------------ [2009-05-11 17:07:25] dlo at rottentomatoes dot com Description: ------------ The session_start() documentation does not state that it sets the Cache-Control, Expires, and Pragma headers. While this is probably proper behavior for 99% of the sites out there, the documentation should at least notify the programmer that these headers are being sent. Source URL: http://us2.php.net/function.session-start Reproduce code: --------------- NA Expected result: ---------------- session_start() will send the following http headers: Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache These headers are set to insure that information generated for a unique user will not be cached by a proxy or the user's browser. The usage of session_start() implies user customized data. See: * http://us2.php.net/manual/en/function.session-cache-limiter.php * http://us2.php.net/manual/en/function.session-cache-expire.php For further info on adjusting these headers. ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=48237&edit=1