Re: [RFC Discussion] Precise session management

On Thu, Mar 24, 2016 at 11:26 AM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote: > On Sun, Feb 14, 2016 at 9:49 AM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote: >> It's been long time since the first proposal. Since session >> module is important module for Web apps, I would like to >> hear opinions for this RFC once again before vote. >> >> RFC >> https://wiki.php.net/rfc/precise_session_management >> >> PR >> https://github.com/php/php-src/pull/1734 >> >> Thank you. > > Vote is over and the result is 15 in favor and 11 against. > It's over half of votes, but I set 2/3 to pass, so we have to come up > to other solution for current session management problems. > > I'm looking forward to hear alternatives from people vote against this RFC. > > Issues are > - Prevent race conditions. > - Prevent session data from abuse. (Stolen session including forever) > > These are allowed with current session module. > > Thank you! I sent new mail for alternative implementation. Please comment to new thread. Thank you. -- Yasuo Ohgaki yohgaki@ohgaki.net