From: john at tarot dot com
Operating system: Linux mike 2.4.19-16mdkenterpris
PHP version: 4.3.1
PHP Bug Type: Session related
Bug description: session cookie being set to deleted when deleting a session
Description:
------------
We have a session-based app with a very large user base. Upon closing the
session a few users would end up having their session cookie set to
'deleted'. Upon subsequent visits to the site, users would find that they
were logged in as someone else because they were not the only user whose
session cookie specified "PHPSESSID=deleted". I have found a workaround
by testing whether the session cookie specifies "PHPSESSID=deleted". when
a session read occurs.
Reproduce code:
---------------
function sess_close() {
//close connection
global $SESS_DBH;
if( isset($SESS_DBH) )
$SESS_DBH->close();
return(true);
}
Expected result:
----------------
I expect the session cookie to be deleted.
Actual result:
--------------
session cookie is set to specify "PHPSESSID=deleted"
--
Edit bug report at http://bugs.php.net/?id=25629&edit=1
--
Try a CVS snapshot (php4): http://bugs.php.net/fix.php?id=25629&r=trysnapshot4
Try a CVS snapshot (php5): http://bugs.php.net/fix.php?id=25629&r=trysnapshot5
Fixed in CVS: http://bugs.php.net/fix.php?id=25629&r=fixedcvs
Fixed in release: http://bugs.php.net/fix.php?id=25629&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=25629&r=needtrace
Try newer version: http://bugs.php.net/fix.php?id=25629&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=25629&r=support
Expected behavior: http://bugs.php.net/fix.php?id=25629&r=notwrong
Not enough info: http://bugs.php.net/fix.php?id=25629&r=notenoughinfo
Submitted twice: http://bugs.php.net/fix.php?id=25629&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=25629&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=25629&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=25629&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=25629&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=25629&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=25629&r=float
