note 61070 added to function.session-regenerate-id

From: Date: Tue, 24 Jan 2006 20:57:57 +0000
Subject: note 61070 added to function.session-regenerate-id
Groups: php.notes 
Request: Send a blank email to php-notes+get-102394@lists.php.net to get a copy of this message
I am calling session_regenerate_id() from inside a method in an object. Since session fixation can occur at permission changes, I have my object call session fixation at these particular security changes. Unfortunately, it seems to fabricate some kind of temporary new session, and then the very next page that loads, it jumps back to the old session id. There seems to be no way to make the regeneration perminent. ---- Server IP: 64.246.30.37 Probable Submitter: 137.30.102.130 ---- Manual Page -- http://www.php.net/manual/en/function.session-regenerate-id.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+61070 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+61070&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+61070&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+61070&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+61070&report=yes&reason=useless Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+61070&report=yes&reason=non-english Delete: already in docs -- http://master.php.net/manage/user-notes.php?action=delete+61070&report=yes&reason=already+in+docs Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+61070&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+61070&report=yes Search -- http://master.php.net/manage/user-notes.php

« previous php.notes (#102394) next »