note 61070 added to function.session-regenerate-id
| From: | Gant at BleachEatingFreaks dot com | Date: | Tue, 24 Jan 2006 20:57:57 +0000 |
| Subject: | note 61070 added to function.session-regenerate-id | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-102394@lists.php.net to get a copy of this message | ||
I am calling session_regenerate_id() from inside a method in an object. Since session fixation can
occur at permission changes, I have my object call session fixation at these particular security
changes.
Unfortunately, it seems to fabricate some kind of temporary new session, and then the very next page
that loads, it jumps back to the old session id. There seems to be no way to make the regeneration
perminent.
----
Server IP: 64.246.30.37
Probable Submitter: 137.30.102.130
----
Manual Page -- http://www.php.net/manual/en/function.session-regenerate-id.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+61070
Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+61070&report=yes&reason=added+to+the+manual
Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+61070&report=yes&reason=bad+code
Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+61070&report=yes&reason=spam
Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+61070&report=yes&reason=useless
Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+61070&report=yes&reason=non-english
Delete: already in docs -- http://master.php.net/manage/user-notes.php?action=delete+61070&report=yes&reason=already+in+docs
Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+61070&report=yes
Reject -- http://master.php.net/manage/user-notes.php?action=reject+61070&report=yes
Search -- http://master.php.net/manage/user-notes.php