Re: session_regenerate_id() not replacing Set-Cookie header
| From: | Ferenc Kovacs | Date: | Wed, 16 Nov 2011 11:30:01 +0000 |
| Subject: | Re: session_regenerate_id() not replacing Set-Cookie header | ||
| References: | 1 2 3 4 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-56342@lists.php.net to get a copy of this message | ||
On Wed, Nov 16, 2011 at 12:12 PM, Michael Wallner <mike@php.net> wrote:
> On Tue, 15 Nov 2011 23:51:25 +0100, Patrick ALLAERT wrote:
>
> >>> As per rfc6265, it seems incorrect:
> >>> "Servers SHOULD NOT include more than one Set-Cookie header field in
> >>> the same response with the same cookie-name."
> >>>
> >
> > @mike
> >
> > Since you are the one who introduced the comment, you might be the best
> > person to comment on this.
> >
>
> If you set replace to 1 it would replace any Set-Cookie header, not
> necessarily the session cookie header.
>
> Mike
>
>
>
if we fix that, I would like to see
https://bugs.php.net/bug.php?id=38104(previously
reported as
https://bugs.php.net/bug.php?id=31455) fixed
also.
--
Ferenc Kovács
@Tyr43l - http://tyrael.hu