Re: [RFC] Secure Session Module Options by Default

From: Date: Sun, 02 Feb 2014 07:14:04 +0000
Subject: Re: [RFC] Secure Session Module Options by Default
References: 1 2 3  Groups: php.internals 
Request: Send a blank email to [email protected] to get a copy of this message 
Hi!

> To set user defined session ID, user has to do
> 
> ini_set('session.use_strict_mode', FALSE);
> session_id(session_create_id('SOME-USEFUL-PREFIX'));
> 
> With this change, user could do
> 
> session_id(session_create_id('SOME-USEFUL-PREFIX'));

I think having parameter on session_id is preferable. What happens if
this is not set and you do session_id('blah') - does it start the
session? What is returned from session_id as the result?


-- 
Stanislav Malyshev, Software Architect
SugarCRM: http://www.sugarcrm.com/
(408)454-6900 ext. 227

Thread (30 messages)

« previous php.internals (#71976) next »