Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:56677
Return-Path: <yohgaki@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 7630 invoked from network); 30 Nov 2011 07:59:48 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 30 Nov 2011 07:59:48 -0000
Authentication-Results: pb1.pair.com smtp.mail=yohgaki@gmail.com; spf=pass; sender-id=pass
Authentication-Results: pb1.pair.com header.from=yohgaki@gmail.com; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.213.42 as permitted sender)
X-PHP-List-Original-Sender: yohgaki@gmail.com
X-Host-Fingerprint: 209.85.213.42 mail-yw0-f42.google.com  
Received: from [209.85.213.42] ([209.85.213.42:47797] helo=mail-yw0-f42.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id 49/40-06106-272E5DE4 for <internals@lists.php.net>; Wed, 30 Nov 2011 02:59:47 -0500
Received: by ywt2 with SMTP id 2so395173ywt.29
        for <internals@lists.php.net>; Tue, 29 Nov 2011 23:59:44 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=gamma;
        h=mime-version:sender:from:date:x-google-sender-auth:message-id
         :subject:to:content-type;
        bh=IqFS6B1taBaRcTZqrmvp8XU4Jq+t1yGBikAm/DcSvBA=;
        b=KU7UrDO2BNvSGvTPEbtGfJm2XmIBL6zStruwJPLmKbnuU+gMeIIyNvGU2rSoZSLe68
         xKtzfmbhZ8vU4rNFVp+w+0mr+kEaRYC4Hfx1I3gY/TGF2/Ump5rSZwU2etUHXf2ns6X/
         azwqL4A8LkDqQ6iLV9nMxRW0SIK6OBvfn+r2M=
Received: by 10.236.192.233 with SMTP id i69mr1644552yhn.60.1322639984273;
 Tue, 29 Nov 2011 23:59:44 -0800 (PST)
MIME-Version: 1.0
Sender: yohgaki@gmail.com
Received: by 10.100.127.18 with HTTP; Tue, 29 Nov 2011 23:59:02 -0800 (PST)
Date: Wed, 30 Nov 2011 16:59:02 +0900
X-Google-Sender-Auth: 09_oCOApUoWoBi5oKHe4GndtiTc
Message-ID: <CAGa2bXY3bjS_WR3sezQ+z=Knq6_v_9dGgi-HZfAqDpQsoUnAGA@mail.gmail.com>
To: internals@lists.php.net
Content-Type: text/plain; charset=ISO-8859-1
Subject: [RFC] Strict Session
From: yohgaki@ohgaki.net (Yasuo Ohgaki)

Hi all,

I though I've better to start new thread, since I changed the status
to "Under Discussion".

This is RFC for making PHP session strict.

https://wiki.php.net/rfc/strict_sessions

I'll implement DoS protection later, since current patch pretty well
tested and suitable for PHP 5.4/5.3, too.

Any comments?

--
Yasuo Ohgaki
yohgaki@ohgaki.net