note 92199 added to function.session-regenerate-id
| From: | dan at dcgi dot co dot uk | Date: | Tue, 14 Jul 2009 10:12:57 +0000 |
| Subject: | note 92199 added to function.session-regenerate-id | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-158260@lists.php.net to get a copy of this message | ||
This function is very problematic when used in conjunction with either relatively quick browser
refreshes or when you've even got another included element on the page (e.g., an image)
included on the page which also regenerates the id! (The effect is that you'll lose all session
data and it will look like you session data didn't get persisted).
The Zend Framework Session classes uses session_regenerate_id(), I would suggest that you comment
out the line in Zend/Session.php which calls session_regenerate_id() (there is only one at the time
of writing this).
I'm not aware of any option to turn it off in Zend_Session.
----
Server IP: 64.71.164.2
Probable Submitter: 62.49.19.94
----
Manual Page -- http://www.php.net/manual/en/function.session-regenerate-id.php
Edit -- https://master.php.net/note/edit/92199
Del: integrated -- https://master.php.net/note/delete/92199/integrated
Del: useless -- https://master.php.net/note/delete/92199/useless
Del: bad code -- https://master.php.net/note/delete/92199/bad+code
Del: spam -- https://master.php.net/note/delete/92199/spam
Del: non-english -- https://master.php.net/note/delete/92199/non-english
Del: in docs -- https://master.php.net/note/delete/92199/in+docs
Del: other reasons-- https://master.php.net/note/delete/92199
Reject -- https://master.php.net/note/reject/92199
Search -- https://master.php.net/manage/user-notes.php