Re: [RFC] Revert/extend/postpone original RFC about read_only, lazy_write sessions

From: Date: Tue, 18 Mar 2014 07:43:56 +0000
Subject: Re: [RFC] Revert/extend/postpone original RFC about read_only, lazy_write sessions
References: 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16  Groups: php.internals 
Request: Send a blank email to internals+get-73261@lists.php.net to get a copy of this message
Hi Stas, Thank you for the comment on github. On Tue, Mar 18, 2014 at 2:45 PM, Stas Malyshev <smalyshev@sugarcrm.com>wrote: > > I agree. > > If nobody objects, I'll remove the option. Please send mail ASAP! > > I think defaults should not change in minor version, unless there's a > very good reason for it, and here it's not a very good reason. Session > module is very sensitive, and doing changes in it should be very > conservative to not break people's workflows. While new behavior serves > an important use case, it may not be everybody's use case, especially > with all handlers. Thus, I would rather have it an option - exactly as > voted. When we move into PHP 6, where certain major changes are > expected, we can change the defaults. But I think introducing such > change in a minor version is unnecessary risk. > And also it subverts RFC process as it's not what the vote was for, and > it's a substantial change - default behavior change (means, everybody > affected) instead of option (means, only people using the option affected No problem. How about making it a INI option? It makes session_start() option handling code a little simpler. It's not mandatory, though. > > When is the beta due? I made PR so that RMs can merge it. > > I'd recommend waiting for it to be thoroughly reviewed before merging. I > myself will try to take a look in coming days, as my schedule allows, > but it may take time to polish some things. Sessions are very sensitive > area, so we need to be very careful. I agree. Even for beta, we should be careful. I found issue with object based user save handler. Unlike procedural user save handlers, object based user save handler uses previously used save handler as it's base class (some what) I think we are better to have another SessionHandler object that support new APIs. We can handle create_sid() method rename with new object also. We may keep current implementation undocumented and may document it new one (createSid()) only. I will name it "SessionUpdateTimestampHandler". If anyone has suggestions, I would appreciate it. Regards, -- Yasuo Ohgaki yohgaki@ohgaki.net

« previous php.internals (#73261) next »