Re: Strict session?
| From: | Yasuo Ohgaki | Date: | Fri, 02 Dec 2011 07:13:08 +0000 |
| Subject: | Re: Strict session? | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-56715@lists.php.net to get a copy of this message | ||
Hi all,
2011/12/2 Yasuo Ohgaki <yohgaki@ohgaki.net>:
> Hi all,
>
> 2011/12/2 Yasuo Ohgaki <yohgaki@ohgaki.net>:
>> With strict session, user cannot set session ID. If user can, it's not
>> a strict session, but adoptive.
>>
>> If user would like to use adoptive session, user may set
>> session.use_strict_mode=0.
>
> When user tried to use session_id() to set their on ID when
> session.use_strict_mode=1, it would be nicer to emit warning error.
> Failing silently is not good.
>
> Any comments?
>
Updated patch so that session_id() raise warning when use_strict_mode is on.
I forgot to mention that I've fixed session_set_save_handler() to take
care new parameters.
If everybody is comfortable with this patch. I would like to write
docs for this.
Regards,
--
Yasuo Ohgaki
yohgaki@ohgaki.net