Re: session_reset() and session_abort() to send errors
Hi Andrey,
On Thu, Mar 27, 2014 at 9:05 PM, Andrey Andreev <[email protected]> wrote:
> > This function is useful for session save handlers that do not lock
> > session data. Example is memcached. This function could be used
> > re-read session data to mitigate over written session data with unlock
> > session data.
> >
> > Andrey, just because you don't think of usage, it does not mean it does
> not
> > mean unneeded or not useful. You are better to ask the reason behind why
> > first.
> > Good library should have defined API for specific tasks, too. You also
> has
> > misunderstanding about why delayed deletion for session_regenerate_id()
> > is mandatory.
>
> Yasuo ... There's no misunderstanding, I just have a disagreement with
> you about that issue and I'm tired of arguing over that. Let's just
> keep session_regenerate_id() in it's own thread, ok?
>
Ok.
I'm talking about XHR cannot be solution and delayed deletion is
mandatory for precise session management. We may discuss later since
I'm going to fork session module.
> But speaking of mandatory: locks are mandatory, so how are non-locking
> handlers an argument in all of this?
>
I use unlocked session for performance tuning often.
Apps could be much faster with little care and little code changes.
Sometimes this function is needed to be sure.
Also, I didn't just question if there's a use case, I'm questioning if
> it is safe to use session_reset() at all. Re-reading doesn't imply
> discarding currently open resources and complerely re-initializing the
> session and from what I see - that's exactly what the function does,
> or am I missing something?
I think session manager should "manage" how session is managed.
Save handlers should save/retrieve session data only. Since session
manager does not have such feature, save handlers does the task and
there is unlocked sessions. Since there is no exposed user functions for
save handlers, reset is needed on occasion.
I would rather have session_gc() back as I wrote in previous mail, though.
This one is truly mandatory function even with precise session data
expiration.
Regards,
--
Yasuo Ohgaki
[email protected]
Thread (15 messages)