Re: Re[2]: [PEAR-DEV] We need another Auth

On Mon, 10 Jun 2002 12:02:09 +0200 Nicolas Hoizey <nhoizey@php.net> wrote: > Hi, > > > this starts to make a lot of exceptions that were not planned in > > Auth. > > I don't see your point on this. Why do you say that the default > sessions management of PHP used in Auth is an "exception"? > > > I corrected the problem by doing a test for the cookie before > > calling start(). But I can only test for PHPSESSID. What if my > > cookie variable has a different name. > > $cookieName = ini_get('session.name'); Maybe just a usefull precision, sessions are not cookies and cookies are not session ;). You should have session without using cookies (btw, that is the goals of trans-sid).$cookieName is ambiguous, it is a session name as far you use the php session handler. > > Thanks for the tip... > > You understand the opposite of what I am saying. > > You don't have to be rude, I'm just trying to answer and help! He drunk too much coffee while he looked the indexer text scrolled down ;)). > > I am saying that if someone is not authenticated, I don't want the > > Auth script to trigger session_start(). There is no reason for that. > OK. Nope. Read the "question is:"post and Markus' remarks. > > Of course, you might need sessions for doing something else, in > > which case you will trigger session_start two times thanks to Auth. > > You can call session_start() 10 times if you want, and PHP won't > create 10 sessions. session_start() should "automagically" know that > there is already a session started. rtfm ;) hth pa