Re: [RFC] Secure Session Module Options by Default
| From: | Stas Malyshev | Date: | Sun, 02 Feb 2014 07:14:04 +0000 |
| Subject: | Re: [RFC] Secure Session Module Options by Default | ||
| References: | 1 2 3 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-71976@lists.php.net to get a copy of this message | ||
Hi!
> To set user defined session ID, user has to do
>
> ini_set('session.use_strict_mode', FALSE);
> session_id(session_create_id('SOME-USEFUL-PREFIX'));
>
> With this change, user could do
>
> session_id(session_create_id('SOME-USEFUL-PREFIX'));
I think having parameter on session_id is preferable. What happens if
this is not set and you do session_id('blah') - does it start the
session? What is returned from session_id as the result?
--
Stanislav Malyshev, Software Architect
SugarCRM: http://www.sugarcrm.com/
(408)454-6900 ext. 227