Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:103193
MIME-Version: 1.0
Date: Thu, 20 Sep 2018 08:15:44 +0200
Message-ID: <CAOWwgpm83Vu3WmGKJrLJkAgU5pyyqtmV3nqZ6m6fHN7NAhoK=w@mail.gmail.com>
To: PHP Internals List <internals@lists.php.net>
Content-Type: multipart/alternative; boundary="000000000000c23eb205764774f6"
Subject: setcookie() doesn't follow the RFC in 7.3
From: nicolas.grekas@gmail.com (Nicolas Grekas)

--000000000000c23eb205764774f6
Content-Type: text/plain; charset="UTF-8"

Hi all,

yesterday I submitted https://bugs.php.net/76906 to report that I wasn't
able to set the "samesite" attribute on cookies while I followed what's
been approved in https://wiki.php.net/rfc/same-site-cookie

Damian answered on the bug report that the $options argument has swallowed
the lifetime one, so that $options is now the 3rd arg and not the 4th as
noted in the RFC.

He suggested me to raise the topic on internals, so here we are.

Are we fine with this? If yes, shouldn't an errata be added to the RFC so
that ppl aren't confused like I was?

Cheers,
Nicolas

--000000000000c23eb205764774f6--