| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
| |
- Added listing of save handlers into phpinfo() output
|
|
|
|
|
| |
attacks which involve passing session ids in URLs.
|
| |
|
|
|
|
|
|
|
| |
- Remove unused STR_CAT macro
- Remove limits/tests based on unused macro
- Implement cache_limiter(private) using private_no_expire
|
| |
|
|
|
|
|
|
| |
Default directory for session data (if not specified) is same (platform-specific) directory used for temporary files.
This is backwards compatible and removes the need for explicitly specifying the session.save_path on Win32.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
are simply appended instead of traversing the hash table on each
URL/form.
also fix an unconditional segfault in rshutdown due to efree'ing
a static char *.
remove remove_var, add reset_vars. move the function declarations
into the right header file.
|
| |
|
|
|
|
|
|
|
| |
@ and remove variables from the URL-Rewriter. (thies)
i have also modified the session module to use this - so it doesn't
need to fiddle with the output-system any more
|
| |
|
|
|
|
|
|
| |
@ that will be kept in the browser in addition to the session-id. This
@ only works when using trans-sid sessions (no cookie). (thies)
|
| |
|
|
|
|
|
|
| |
- Bump the API date and remove extra cpp macro
- Pass TSRMLS appropiately to the create_sid function
|
|
|
|
|
|
|
| |
of the session ID string. Default PS_MOD() macro sets this to be the default
creation routine. PS_MOD_SID() macro sets this to a handlers session ID
creation routine.
|
|
|
|
|
|
|
|
|
| |
was contained in get/post variables" (which I still am not convinced
of completely), we need a separate variable which determines whether
to define SID in the event that a cookie was not sent.
Noticed by: Matt Allen
|
| |
|
|
|
|
|
|
| |
No real memory leaks though, because they are catched by the
memory manager.
|
|
|
|
|
| |
a cookie.
|
|
|
|
|
|
| |
Now PHP_SESSION_API is defined to the date of the last change,
so that externa source-code can handle changes more gracefully.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
I don't have time right now to leave in the good ones and remove
only the bad ones.
There are some semantical changes which I reject, because
they aim at fixing a bug which is at a completely other location.
Then SID does not gefined anymore properly. (This broken patch
has not been sent to me at all.)
Also, there were *so* many whitespace changes which already
make these commits bogus.
|
| |
|
|
|
|
|
|
| |
Riase E_NOTICE error instead of E_WARNING. Since it is valid if
user uses session_save_path() with session_module_name().
|
| |
|
| |
|
|
|
|
|
| |
# Need a little more work for backword compatibility
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
(DO NOT document this function yet)
Fixed crash bug with ob_end_*() function. ob_end_*() will not delete
buffers that may not be deleted.
php_start_ob_buffer() and php_ob_set_internal_handler() takes parameter for
if the buffer created may be deleted or not.
Added 3rd parameter "bool erase" to ob_start(). If FALSE, buffer may not be
deleted until script finshes.
Changed ob_*() function that have void return type to bool. All ob_*()
functions return TRUE for success, FALSE for failure.
@ - Added ob_get_status() to get array of buffers and it's status. (Yasuo)
@ - Fixed crash bug with ob_end_*() function. ob_end_*() will not delete
@ buffers that may not be deleted. (Yasuo)
@ - Added 3rd parameter "bool erase" to ob_start(). If FALSE, buffer may not be
@ deleted until script finshes. (Yasuo)
@ - Changed ob_*() function that have void return type to bool. All ob_*()
@ functions return TRUE for success, FALSE for failure. (Yasuo)
|
|
|
|
|
| |
macros
|
| |
|
| |
|
|
|
|
|
|
| |
# I also found what's wrong in mod_mm.c :)
# I'll fix it later since don't have much time now.
|
|
|
|
|
|
| |
Fixed crash when user save handler is incorrectly used.
Fixed crash when session read failed.
|
|
|
|
|
|
|
|
|
|
|
| |
@ to off. (Thies)
guys, shoot me if i'm wrong, but when we have set register_globals to off we
should _not_ touch any global variables at any time, right? so all session
register/unregister should only work on $HTTP_SESSION_VARS and $_SESSION. this
patch fixes at least one spot where we were touching globals even with
register_globals set to off.
|
| |
|
|
|
|
|
|
| |
# These lines should be enabled when save handlers can be initialized
# before session module initialization.
|
|
|
|
|
|
|
| |
# This fixes only a little issue with sub modules
# More fixes are needed to make sub modules work correctly.
# 4.1.x also has the same problem....
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
| |
$_SESSION (or $HTTP_SESSION_VARS) were not properly saved. Fixed.
|
| |
|
|
|
|
|
|
|
| |
Changes pass `make test´ and a couple of custom tests.
Enjoy.
|