Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:56341 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 11981 invoked from network); 16 Nov 2011 11:12:59 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 16 Nov 2011 11:12:59 -0000 X-Host-Fingerprint: 78.142.172.145 gate-g21.inqnet.at Date: Wed, 16 Nov 2011 06:12:58 -0500 Received: from [78.142.172.145] ([78.142.172.145:4866] helo=localhost.localdomain) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id A0/00-11951-ABA93CE4 for ; Wed, 16 Nov 2011 06:12:58 -0500 Message-ID: To: internals@lists.php.net References: User-Agent: Pan/0.135 (Tomorrow I'll Wake Up and Scald Myself with Tea; GIT 30dc37b master) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Posted-By: 78.142.172.145 Subject: Re: [PHP-DEV] session_regenerate_id() not replacing Set-Cookie header From: mike@php.net (Michael Wallner) On Tue, 15 Nov 2011 23:51:25 +0100, Patrick ALLAERT wrote: >>> As per rfc6265, it seems incorrect: >>> "Servers SHOULD NOT include more than one Set-Cookie header field in >>> the same response with the same cookie-name." >>> > > @mike > > Since you are the one who introduced the comment, you might be the best > person to comment on this. > If you set replace to 1 it would replace any Set-Cookie header, not necessarily the session cookie header. Mike