Re: session_regenerate_id() not replacing Set-Cookie header

Hi Stats, Even if this bug is marked as bogus in bug DB, I think this bug needed to be fixed for 5.4. https://bugs.php.net/bug.php?id=38104 It seems this bug causes problem with IE that not keeping session correctly.. From RFC 6250 ------------- Servers SHOULD NOT include more than one Set-Cookie header field in the same response with the same cookie-name. (See Section 5.2 for how user agents handle this case.) ------------- http://datatracker.ietf.org/doc/rfc6265/?include_text=1 It seems IE conform this standard. According to svn log, it seems it was not fixed. Anyone working with this issue? or already fixed? I'm just curious. Regards, -- Yasuo Ohgaki yohgaki@ohgaki.net 2012/1/9 Ferenc Kovacs <tyra3l@gmail.com>: > On Wed, Nov 16, 2011 at 12:30 PM, Ferenc Kovacs <tyra3l@gmail.com> wrote: > >> >> >> On Wed, Nov 16, 2011 at 12:12 PM, Michael Wallner <mike@php.net> wrote: >> >>> On Tue, 15 Nov 2011 23:51:25 +0100, Patrick ALLAERT wrote: >>> >>> >>> As per rfc6265, it seems incorrect: >>> >>> "Servers SHOULD NOT include more than one Set-Cookie header field in >>> >>> the same response with the same cookie-name." >>> >>> >>> > >>> > @mike >>> > >>> > Since you are the one who introduced the comment, you might be the best >>> > person to comment on this. >>> > >>> >>> If you set replace to 1 it would replace any Set-Cookie header, not >>> necessarily the session cookie header. >>> >>> Mike >>> >>> >>> >> if we fix that, I would like to see >> https://bugs.php.net/bug.php?id=38104(previously reported as >> https://bugs.php.net/bug.php?id=31455) fixed also. >> >> -- >> Ferenc Kovács >> @Tyr43l - http://tyrael.hu >> > > bump. > > -- > Ferenc Kovács > @Tyr43l - http://tyrael.hu