Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:102942
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain pmmaga.net designates 149.210.149.69 as permitted sender)
MIME-Version: 1.0
References: <a4189866-23ea-4dc5-12a4-a7fbad8e5601@genkgo.nl>
 <1abd260d-ebc4-a062-3381-72485946e8bc@gmail.com> <a55b37e3-268c-f8ab-6545-6cf7a4f537f0@genkgo.nl>
 <CAJd4=Ya67XaX3bwwQn20GUQqEvEVe8XEepRz9+of6h4t4fC_fg@mail.gmail.com> <279bc20a-6bbb-7114-fb7e-293b543a5fdb@gmx.de>
In-Reply-To: <279bc20a-6bbb-7114-fb7e-293b543a5fdb@gmx.de>
Date: Sat, 21 Jul 2018 22:49:26 +0100
Message-ID: <CAJd4=YaeyVwBT-FOMR1ZKn1Bd3hiAs05r0oQSn-eDY2MT3O6+w@mail.gmail.com>
To: "Christoph M. Becker" <cmbecker69@gmx.de>
Cc: f.bosch@genkgo.nl, Stanislav Malyshev <smalyshev@gmail.com>, 
	PHP internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary="0000000000006da1090571896332"
Subject: Re: [PHP-DEV] [VOTE] Same Site Cookie RFC
From: mail@pmmaga.net (=?UTF-8?Q?Pedro_Magalh=C3=A3es?=)

--0000000000006da1090571896332
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Sat, Jul 21, 2018 at 12:11 PM Christoph M. Becker <cmbecker69@gmx.de>
wrote:

> Personally, I'd even prefer this, but that's not what was voted upon, so
> I'm not sure if it's okay.  Anyhow, the implementation is available as
> <https://github.com/php/php-src/pull/3398>.  Thanks, Pedro!
>

I personally believe that the intent of the vote is to have this feature
and to have it included as an alternative array of parameters. I don't mean
to step on anyone's toes with the proposed implementation, but given that
the RFC doesn't define the array of options I think most people didn't
notice this design choice and/or ultimately just wanted this feature
accepted.


> > About the implementation, the array of options is never really defined =
in
> > the RFC. If we assume that it is identical to the proposed output
> > of session_get_cookie_params, the name of the first key should be
> lifetime.
> > However, for setcookie and setrawcookie, the documented parameter name =
is
> > expire. Would there be any issue if we would assume lifetime for the 4
> > functions?
>
> I'd prefer =E2=80=9Cexpire_s_=E2=80=9D, but I'm okay with =E2=80=9Clifeti=
me=E2=80=9D.
>

Although I had suggested using the same key for all functions, when I
started the implementation I realized they have different meanings. For
session_get_cookie_params, lifetime is a relative amount of seconds, but
for setcookie and setrawcookie expire is an absolute timestamp. So I kept
that distinction.
About your suggestion, I looked again, and in fact, the only place where
the parameter is called expire is in the docs. Internally (ie. Reflection)
it is called expires. Given this and the fact that it is what actually is
used in the cookie header, I've changed the key to "expires".

Regards,
Pedro

--0000000000006da1090571896332--