summaryrefslogtreecommitdiff
path: root/modules/session/mod_session.c
Commit message (Expand)AuthorAgeFilesLines
* fix separator parsing, PR #333Giovanni Bechis2023-03-231-1/+1
* Harden mod_session and avoid overflow in case of indecently large sessionChristophe Jaillet2022-04-271-3/+6
* mod_session: account for the '&' in identity_concat().Yann Ylavic2021-03-011-2/+1
* mod_session: save one apr_strtok() in session_identity_decode().Yann Ylavic2021-03-011-1/+1
* Improve a message about SessionExpiryUpdateInterval valuesChristophe Jaillet2020-11-141-1/+1
* restore/explain new session creationEric Covener2020-03-021-0/+9
* PR56052: resolve problems with expired sessionsEric Covener2020-03-011-9/+8
* Fix spelling errors found by codespell. [skip ci]Mike Rumph2020-02-131-1/+1
* leave a hint about session expiration at TRACE2Eric Covener2019-08-251-0/+1
* Always decode session attributes early.Hank Ibell2019-01-101-11/+14
* mod_session: Strip Session header when SessionEnv is on.Yann Ylavic2018-02-161-5/+8
* Remove unnecessary apr_table_do() function castsJacob Champion2016-11-101-7/+6
* mod_session: Introduce SessionExpiryUpdateInterval which allows to Yann Ylavic2015-10-161-0/+34
* mod_session: When we have a session we were unable to decode, behave as if th...Graham Leggett2014-01-241-12/+18
* mod_session: Fix problems interpreting the SessionInclude andJeff Trawick2014-01-201-3/+3
* mod_session: Reset the max-age on session save. PR 47476.Graham Leggett2013-10-131-3/+10
* mod_session: After parsing the value of the header specified by theGraham Leggett2013-10-131-0/+2
* CVE-2013-2249Graham Leggett2013-05-311-2/+1
* s/;;/;/Christophe Jaillet2012-10-121-1/+1
* Various code clean upStefan Fritsch2012-07-151-1/+1
* mod_session: Sessions are encoded as application/x-www-form-urlencoded string...Graham Leggett2012-02-251-3/+3
* Add lots of unique tags to error log messagesStefan Fritsch2011-12-021-9/+9
* mod_session: Use apr_status_t as a return code across the mod_session API,Graham Leggett2011-12-021-16/+33
* Remove some more now redundant log prefixesStefan Fritsch2011-11-301-10/+9
* Code cleanup: replace apr_table_set with non-copying apr_table_setnStefan Fritsch2011-06-191-2/+2
* Note for future dev....Jim Jagielski2010-11-031-5/+7
* CVE-2010-1452: Fix handling of missing path segments in the parsed URI struct...Paul Querna2010-07-211-2/+2
* Use the new APLOG_USE_MODULE/AP_DECLARE_MODULE macros everywhere to takeStefan Fritsch2010-06-061-1/+1
* mod_session: Session expiry was being initialised, but not updatedGraham Leggett2010-02-021-0/+9
* mod_session.c: Prevent a segfault when session is added but notGraham Leggett2009-09-131-1/+1
* Remove stray trailing whitespace from mod_session.c.Graham Leggett2009-09-131-3/+3
* * Prevent a segfault when a CGI script sets a cookie with a null value.Ruediger Pluem2008-07-191-1/+1
* You don't export the local registered functionsWilliam A. Rowe Jr2008-06-071-61/+64
* mod_session has a different scope than the core.William A. Rowe Jr2008-06-061-19/+19
* Be defensive to ensure no segfault should the session entries tableGraham Leggett2008-04-171-1/+1
* Change the directives within the mod_session* modules to be validGraham Leggett2008-04-091-6/+6
* Insert prototypes to remove compiler warnings. [Joe Orton]Graham Leggett2008-04-081-1/+6
* * Fix eol-style property.Ruediger Pluem2008-04-081-620/+620
* No var declarations in the middle of the code.Guenter Knauf2008-04-081-619/+620
* Remove all references to CORE_PRIVATE.Paul Querna2008-04-071-2/+0
* Rename the ap_escape_path_segment_b function as suggested byGraham Leggett2008-04-051-2/+2
* Make sure we protect ourselves against the session being NULL, which it will beGraham Leggett2008-04-051-7/+11
* mod_session: Add a generic session interface to unify the differentGraham Leggett2008-04-041-0/+617