Re: [RFC Discussion] Precise session management
| From: | Yasuo Ohgaki | Date: | Thu, 24 Mar 2016 02:26:07 +0000 |
| Subject: | Re: [RFC Discussion] Precise session management | ||
| References: | 1 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-91882@lists.php.net to get a copy of this message | ||
Hi all,
On Sun, Feb 14, 2016 at 9:49 AM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:
> It's been long time since the first proposal. Since session
> module is important module for Web apps, I would like to
> hear opinions for this RFC once again before vote.
>
> RFC
> https://wiki.php.net/rfc/precise_session_management
>
> PR
> https://github.com/php/php-src/pull/1734
>
> Thank you.
Vote is over and the result is 15 in favor and 11 against.
It's over half of votes, but I set 2/3 to pass, so we have to come up
to other solution for current session management problems.
I'm looking forward to hear alternatives from people vote against this RFC.
Issues are
- Prevent race conditions.
- Prevent session data from abuse. (Stolen session including forever)
These are allowed with current session module.
Thank you!
--
Yasuo Ohgaki
yohgaki@ohgaki.net