cvs: pear /Auth_HTTP Auth_HTTP.php
| From: | Rui Hirokawa | Date: | Sun, 01 Oct 2006 23:22:26 +0000 |
| Subject: | cvs: pear /Auth_HTTP Auth_HTTP.php | ||
| Groups: | php.pear.cvs | ||
| Request: | Send a blank email to pear-cvs+get-42339@lists.php.net to get a copy of this message | ||
hirokawa Sun Oct 1 23:22:26 2006 UTC
Modified files:
/pear/Auth_HTTP Auth_HTTP.php
Log:
fixed bug #7784 'sessionSharing' is disabled by default
because Auth::start() changes session id, and the security problem.
http://cvs.php.net/viewvc.cgi/pear/Auth_HTTP/Auth_HTTP.php?r1=1.28&r2=1.29&diff_format=u
Index: pear/Auth_HTTP/Auth_HTTP.php
diff -u pear/Auth_HTTP/Auth_HTTP.php:1.28 pear/Auth_HTTP/Auth_HTTP.php:1.29
--- pear/Auth_HTTP/Auth_HTTP.php:1.28 Sun Oct 1 23:19:01 2006
+++ pear/Auth_HTTP/Auth_HTTP.php Sun Oct 1 23:22:26 2006
@@ -18,7 +18,7 @@
// | David Costa <gurugeek@php.net> |
// +----------------------------------------------------------------------+
//
-// $Id: Auth_HTTP.php,v 1.28 2006/10/01 23:19:01 hirokawa Exp $
+// $Id: Auth_HTTP.php,v 1.29 2006/10/01 23:22:26 hirokawa Exp $
//
require_once "Auth/Auth.php";
@@ -49,7 +49,7 @@
* @author David Costa <gurugeek@php.net>
* @package Auth_HTTP
* @extends Auth
- * @version $Revision: 1.28 $
+ * @version $Revision: 1.29 $
*/
class Auth_HTTP extends Auth
{
@@ -181,7 +181,7 @@
'digestRealm' => 'protected area',
'forceDigestOnly' => false,
'nonceLife' => 300,
- 'sessionSharing' => true,
+ 'sessionSharing' => false,
);
if (!empty($options['authType'])) {