On Thu, Jun 27, 2013 at 1:36 AM, Yasuo Ohgaki <yohg...@ohgaki.net> wrote:
> Hi, > > Sorry for the long delay, I've sent pull requests > > https://github.com/php/php-src/pull/368 > https://github.com/php/php-src/pull/367 > https://github.com/php/php-src/pull/366 > > Hi, I see the strict mode check is now implemented in the handlers and not session.c, presumably to keep ABI, but this means code is duplicated and the setting only actually works if the handler supports it. It's unfortunate timing since 5.5 has just gone, but I think it would make much more sense to have a new function in the structure (as in your original patch) and do this only in PHP.next. Having such an ini setting which quietly fails if using an unsupported handler is not good. I guess you could keep a whitelist of supported handlers but that's also obviously far from ideal. Regards, Arpad > Thank you for your time. > > -- > Yasuo Ohgaki > yohg...@ohgaki.net > > > 2012/12/24 Yasuo Ohgaki <yohg...@ohgaki.net> > > > Hi stats and others, > > > > Sorry for the delay. > > I've finally updated the strict session patch. > > > > Following diff is against PHP-5.3, but 5.4 and others will be mostly the > > same. > > > > > > > https://github.com/yohgaki/php-src/commit/42dcd8ef7cd2f9f2071b16586822dadd647c96ef > > > > I was promised to create separate patch for session id collision > > detection, but > > the patch is also in the diff. I left comments for the "if" statement > > handles > > collision. If you still prefer to have separate patch, I'll do it when > > I send pull requests. > > > > If nobody has comment, I'll create patch for 5.4. > > > > If you read this patch closely, you'll see that this patch accesses > > PS(id) global directly due to limitation of current API. It would be > > good to have new API for 5.5, I think. > > > > BTW, this patch fixes bug #60634 as a side effect also. > > https://bugs.php.net/bug.php?id=60634 > > > > Comments are appreciated. > > > > Regards, > > > > -- > > Yasuo Ohgaki > > yohg...@ohgaki.net > > >
