Re: Session Id Collisions

Hi, 2012/8/27 Yasuo Ohgaki <yohgaki@ohgaki.net>: > Hi, > > 2012/8/26 Stas Malyshev <smalyshev@sugarcrm.com>: >> Hi! >> >>> What's the status of session adoption patch? >>> I've created patches for all 3 versions and I think Stats >>> is going to merge it to master and PHP 5.4. >> >> As far as I remember there were some things that needed to be >> refactored/changed and I didn't see the updates since then, but if you >> could point me to the latest version I could check it out. > > We agreed not to introduce new session save handler API so that > there would be no barrier for adoption. > > I've done it months ago, I guess you missed a mail. > These are the patch. > > master > https://gist.github.com/1379668 > > 5.4 > https://gist.github.com/2224196 > > 5.3 > https://gist.github.com/2224360 > > There might be conflict since it's made at 3/28, I'll > fix it if there is. (I'll check it myself within a few days) > >> if you >> could point me to the latest version I could check it out. > > Thank you for your time. > > Regards, It seems I've already added collision detection when I last updated :) It tries to generate new session ID a few times and if it fails, it does not initialize session. Regards, -- Yasuo Ohgaki yohgaki@ohgaki.net