[PHP-DEV] Re: [RFC][VOTE] Add session_create_id() function

2016-08-22 Thread Yasuo Ohgaki
Hi all, On Wed, Aug 10, 2016 at 6:14 PM, Yasuo Ohgaki wrote: > > This is RFC for adding session_create_id() function. > > Session ID string uses special binary to string conversion. Users > should write lengthy and slow code to have the same session ID string > as session

[PHP-DEV] Re: [RFC][VOTE] Add session_create_id() function

2016-08-15 Thread Tom Worster
On 8/13/16 9:02 PM, Yasuo Ohgaki wrote: Hi Tom, On Sun, Aug 14, 2016 at 12:35 AM, Tom Worster wrote: Rather than argue the details of randomness, I have more basic comments. 1. If an app needs to access session values, it can and should do this without indirection through

[PHP-DEV] Re: [RFC][VOTE] Add session_create_id() function

2016-08-14 Thread Yasuo Ohgaki
Hi all, On Wed, Aug 10, 2016 at 6:14 PM, Yasuo Ohgaki wrote: > https://wiki.php.net/rfc/session-create-id > It requires 2/3 majority to pass. > Vote starts: 2016/08/10 - Vote ends: 2016/08/17 23:59:59 UTC There are 2 mistakes in pseudo example code in discussion section and

[PHP-DEV] Re: [RFC][VOTE] Add session_create_id() function

2016-08-13 Thread Yasuo Ohgaki
Hi Tom, On Sun, Aug 14, 2016 at 12:35 AM, Tom Worster wrote: > Rather than argue the details of randomness, I have more basic comments. > > 1. If an app needs to access session values, it can and should do this > without indirection through the PHP session ID table. I don't get

[PHP-DEV] Re: [RFC][VOTE] Add session_create_id() function

2016-08-13 Thread Tom Worster
On 8/10/16 5:14 AM, Yasuo Ohgaki wrote: Hi all, This is RFC for adding session_create_id() function. Session ID string uses special binary to string conversion. Users should write lengthy and slow code to have the same session ID string as session module does. It also validates and makes sure

[PHP-DEV] Re: [RFC][VOTE] Add session_create_id() function

2016-08-11 Thread Yasuo Ohgaki
Hi all, On Wed, Aug 10, 2016 at 6:14 PM, Yasuo Ohgaki wrote: > This is RFC for adding session_create_id() function. > > Session ID string uses special binary to string conversion. Users > should write lengthy and slow code to have the same session ID string > as session