Re: session_regenerate_id() not replacing Set-Cookie header
| From: | Michael Wallner | Date: | Wed, 16 Nov 2011 11:12:58 +0000 |
| Subject: | Re: session_regenerate_id() not replacing Set-Cookie header | ||
| References: | 1 2 3 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-56341@lists.php.net to get a copy of this message | ||
On Tue, 15 Nov 2011 23:51:25 +0100, Patrick ALLAERT wrote:
>>> As per rfc6265, it seems incorrect:
>>> "Servers SHOULD NOT include more than one Set-Cookie header field in
>>> the same response with the same cookie-name."
>>>
>
> @mike
>
> Since you are the one who introduced the comment, you might be the best
> person to comment on this.
>
If you set replace to 1 it would replace any Set-Cookie header, not
necessarily the session cookie header.
Mike