Re: [VOTE] Secure Session Module Options/Internal by Default
| From: | Tjerk Meesters | Date: | Tue, 18 Feb 2014 10:56:14 +0000 |
| Subject: | Re: [VOTE] Secure Session Module Options/Internal by Default | ||
| References: | 1 2 3 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-72679@lists.php.net to get a copy of this message | ||
On Tue, Feb 18, 2014 at 6:49 PM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:
> Hi Damien,
>
> On Tue, Feb 18, 2014 at 7:38 PM, Damien Tournoud <damz@damz.org> wrote:
>
> > I remember that the
use_strict_mode=on added in PHP 5.5
> > was broken and
> > would prevent the application from setting a session ID by itself. This
> is
> > actually fairly common, about 800k Drupal 7 websites do that.
> >
> > Unless this is fixed, this setting just cannot be enabled by default.
> >
>
> It was simple mistake during merge. It is fixed next release already. Do
> not worry about it.
>
It seemed to be part of the patch of the respective rfc:
https://gist.github.com/yohgaki/1379668#file-php-trunk-strict-session-patch-L602
How was this a merge issue?
>
> Regards,
>
> --
> Yasuo Ohgaki
> yohgaki@ohgaki.net
>
--
--
Tjerk