Re: Session Id Collisions
| From: | Yasuo Ohgaki | Date: | Thu, 27 Jun 2013 10:51:42 +0000 |
| Subject: | Re: Session Id Collisions | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 12 13 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-67935@lists.php.net to get a copy of this message | ||
Hi Arpad,
2013/6/27 Arpad Ray <arraypad@gmail.com>
> I see the strict mode check is now implemented in the handlers and not
> session.c, presumably to keep ABI, but this means code is duplicated and
> the setting only actually works if the handler supports it. It's
> unfortunate timing since 5.5 has just gone, but I think it would make much
> more sense to have a new function in the structure (as in your original
> patch) and do this only in PHP.next.
>
> Having such an ini setting which quietly fails if using an unsupported
> handler is not good. I guess you could keep a whitelist of supported
> handlers but that's also obviously far from ideal.
>
Thank you for comment.
There are plenty of time before 5.6 release, I would like to fix ps_module
API also. Current implementation requires ps_modules to access PS(id) to
prevent rare case of crash. I'll try to implement a little better API for
ps_modules.
Regards,
--
Yasuo Ohgaki
yohgaki@ohgaki.net