Re: [PHP4BETA] UUIDs

Andrey Zmievski wrote: > Going back to the whole session id discussion a while back, why don't we just > use UUID's for that? Because they do the wrong thing. A session is just a session, it should end when the users turns away from our application (for a suitable definition for "turn away"). They are in no way intended to identify an interface (IP-numbers), a machine (UUID) or even a particular user (username-UUID-combination). It is even an advantage if they are different from session to session for the same user, using the same machine with the same IP-number. User IDs, when are bound to a session once a user establishes proof for his identity, are a different matter and have different requirements. Kristian -- Kristian Köhntopp, NetUSE Kommunikationstechnologie GmbH Siemenswall, D-24107 Kiel, Germany, +49 431 386 436 00 Using PHP3? See our web development library at http://phplib.shonline.de/ (GPL)