Re: Session Id Collisions

From: Date: Thu, 27 Jun 2013 10:51:42 +0000
Subject: Re: Session Id Collisions
References: 1 2 3 4 5 6 7 8 9 10 11 12 13  Groups: php.internals 
Request: Send a blank email to [email protected] to get a copy of this message
Hi Arpad,

2013/6/27 Arpad Ray <[email protected]>

> I see the strict mode check is now implemented in the handlers and not
> session.c, presumably to keep ABI, but this means code is duplicated and
> the setting only actually works if the handler supports it. It's
> unfortunate timing since 5.5 has just gone, but I think it would make much
> more sense to have a new function in the structure (as in your original
> patch) and do this only in PHP.next.
>
> Having such an ini setting which quietly fails if using an unsupported
> handler is not good. I guess you could keep a whitelist of supported
> handlers but that's also obviously far from ideal.
>

Thank you for comment.

There are plenty of time before 5.6 release, I would like to fix ps_module
API also. Current implementation requires ps_modules to access PS(id) to
prevent rare case of crash. I'll try to implement a little better API for
ps_modules.

Regards,

--
Yasuo Ohgaki
[email protected]


Thread (37 messages)

« previous php.internals (#67935) next »