note 89564 added to function.session-set-save-handler

after spending 8 hours to find out whats going on.. just for the records, because php.net ignore the real world out there: debian 5 installs by default the php-suhosin module, which changes the behavior of session_set_save_handler read/write function. on calling the session write function the session data will be encrypted, and the returning string from the read function are decrypted and verified. the encrypted data is no more compatible with session_encode/session_decode. and breaks by default, subdomain handling and multiple host setups where different document roots are used. for futher information look at: http://www.hardened-php.net/suhosin/configuration.html session sample data (debian 4): test|s:3:"sdf"; session sample data (debian 5, with php-suhosin): 3GdlPEGr2kYgRFDs-pUSoKomZ4fN7r5BM5oKOCMsWNc... i thing the suhosin patch should report a warning in case of invalid session data, to get a clue whats going wrong. ---- Server IP: 81.223.48.75 Probable Submitter: 85.125.209.66 ---- Manual Page -- http://www.php.net/manual/en/function.session-set-save-handler.php Edit -- https://master.php.net/note/edit/89564 Del: integrated -- https://master.php.net/note/delete/89564/integrated Del: useless -- https://master.php.net/note/delete/89564/useless Del: bad code -- https://master.php.net/note/delete/89564/bad+code Del: spam -- https://master.php.net/note/delete/89564/spam Del: non-english -- https://master.php.net/note/delete/89564/non-english Del: in docs -- https://master.php.net/note/delete/89564/in+docs Del: other reasons-- https://master.php.net/note/delete/89564 Reject -- https://master.php.net/note/reject/89564 Search -- https://master.php.net/manage/user-notes.php