note 48789 added to function.session-regenerate-id
| From: | licp at hotmail dot com | Date: | Fri, 07 Jan 2005 04:08:00 +0000 |
| Subject: | note 48789 added to function.session-regenerate-id | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-82881@lists.php.net to get a copy of this message | ||
By inspecting the source code, I am not sure that after session_regenerate_id() run, the original
session data does not destroy (still keeps at the system) that sniffers still hijack by applying
original session identifier.
In addition, I find that if user-level session storage handler is used. session_regenerate_id() does
not work.
----
Manual Page -- http://www.php.net/manual/en/function.session-regenerate-id.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+48789
Delete -- http://master.php.net/manage/user-notes.php?action=delete+48789&report=yes
Reason: bad code -- http://master.php.net/manage/user-notes.php?action=delete+48789&report=yes&reason=bad+code
Reason: spam -- http://master.php.net/manage/user-notes.php?action=delete+48789&report=yes&reason=spam
Reason: useless example -- http://master.php.net/manage/user-notes.php?action=delete+48789&report=yes&reason=useless+example
Reason: contains commercial links -- http://master.php.net/manage/user-notes.php?action=delete+48789&report=yes&reason=contains+commercial+links
Reason: useless note -- http://master.php.net/manage/user-notes.php?action=delete+48789&report=yes&reason=useless+note
Reject -- http://master.php.net/manage/user-notes.php?action=reject+48789&report=yes
Search -- http://master.php.net/manage/user-notes.php