Re: session_regenerate_id() not replacing Set-Cookie header

On Wed, Nov 16, 2011 at 12:30 PM, Ferenc Kovacs <tyra3l@gmail.com> wrote: > > > On Wed, Nov 16, 2011 at 12:12 PM, Michael Wallner <mike@php.net> wrote: > >> On Tue, 15 Nov 2011 23:51:25 +0100, Patrick ALLAERT wrote: >> >> >>> As per rfc6265, it seems incorrect: >> >>> "Servers SHOULD NOT include more than one Set-Cookie header field in >> >>> the same response with the same cookie-name." >> >>> >> > >> > @mike >> > >> > Since you are the one who introduced the comment, you might be the best >> > person to comment on this. >> > >> >> If you set replace to 1 it would replace any Set-Cookie header, not >> necessarily the session cookie header. >> >> Mike >> >> >> > if we fix that, I would like to see > https://bugs.php.net/bug.php?id=38104(previously reported as > https://bugs.php.net/bug.php?id=31455) fixed also. > > -- > Ferenc Kovács > @Tyr43l - http://tyrael.hu > bump. -- Ferenc Kovács @Tyr43l - http://tyrael.hu