Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:122542
Date: Sun, 03 Mar 2024 16:00:42 +0000
To: Kamil Tekiela <tekiela246@gmail.com>
Cc: PHP internals <internals@lists.php.net>
Subject: Re: [PHP-DEV] [RFC] [Discussion] Deprecate GET/POST sessions
Message-ID: <gvsLDSENsS87LGXzp2ZHU3Zan2V-OVjzFJbT2yHDVj2N4xsv29gIyfTRMrloA25H4YoNauhS9DL9_4YM6fBthqSnC7AGnkoZk2X3CNptGow=@gpb.moe>
In-Reply-To: <CAGBsUrera8cVE5nW1H6bCSok+gOjpHCyqutaCewoXEtYju-8yA@mail.gmail.com>
References: <CAGBsUrera8cVE5nW1H6bCSok+gOjpHCyqutaCewoXEtYju-8yA@mail.gmail.com>
Feedback-ID: 96993444:user:proton
Precedence: bulk
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
From: internals@gpb.moe ("Gina P. Banyard")

On Saturday, 2 March 2024 at 21:10, Kamil Tekiela <tekiela246@gmail.com> wr=
ote:

> Hi Internals,
>=20
> I would like to start a discussion on a new RFC
> https://wiki.php.net/rfc/deprecate-get-post-sessions
>=20
> Please let me know whether the idea is clear and the RFC is understandabl=
e.
>=20
> In particular, I am looking for any feedback as to why this is a bad
> idea. The primary motivation behind this RFC is to reduce potential
> security pitfalls.
>=20
> Regards,
> Kamil Tekiela

I think this makes sense to me.
I would possibly move the deprecation of the SID constant from the mass dep=
recation RFC to this one, as I would be very odd to have this accepted but =
not the latter.


Best regards,

Gina P. Banyard