Re: [RFC] [Discussion] Deprecate GET/POST sessions
| From: | Gina P. Banyard | Date: | Sun, 03 Mar 2024 16:00:42 +0000 |
| Subject: | Re: [RFC] [Discussion] Deprecate GET/POST sessions | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-122542@lists.php.net to get a copy of this message | ||
On Saturday, 2 March 2024 at 21:10, Kamil Tekiela <tekiela246@gmail.com> wrote:
> Hi Internals,
>
> I would like to start a discussion on a new RFC
> https://wiki.php.net/rfc/deprecate-get-post-sessions
>
> Please let me know whether the idea is clear and the RFC is understandable.
>
> In particular, I am looking for any feedback as to why this is a bad
> idea. The primary motivation behind this RFC is to reduce potential
> security pitfalls.
>
> Regards,
> Kamil Tekiela
I think this makes sense to me.
I would possibly move the deprecation of the SID constant from the mass deprecation RFC to this one,
as I would be very odd to have this accepted but not the latter.
Best regards,
Gina P. Banyard