Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:68390
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.217.181 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <51FFFBB5.6000807@sugarcrm.com>
References: <CAJRMtAGcN-n9wv8-CFiLt+bXhMvOcmfG8a3kBORVUVCz9n4Bqw@mail.gmail.com>
	<CAGa2bXZ3pYiO5Lfn5NS-vuPBk_X6SUsr6Qsswya6mx0S3SjgeQ@mail.gmail.com>
	<CAGa2bXY-+B-_-3N2=VYy7rJB-eXF0nzrGA-eSJmM+O87qDrx-Q@mail.gmail.com>
	<51FEEEAF.1070705@sugarcrm.com>
	<51FEF5AA.5060409@sugarcrm.com>
	<CAGa2bXY0f+vveuRi5hbtfk2d2jn80zAwg0611nqEHXuzNJXBWA@mail.gmail.com>
	<CA+p1TcaEth-KAQEdm9vufs5urky00DBqg1Lg2yHibErb1vWrrw@mail.gmail.com>
	<CAGa2bXbYgQ1wVUQOq1=0MQQ7g7V+UonLFmMO5vQCJxTDFsLRkA@mail.gmail.com>
	<CA+p1TcaQtT3nm+rqhArfu0AFsNBTr2u_-KXjd6A2E6HVj2r_tQ@mail.gmail.com>
	<CAGa2bXb50teO0UgpsNdwWdCkv=+2MAJAw0VLfPu0T9dDRbU1ZA@mail.gmail.com>
	<CA+p1TcZ=eRmJLcGS430rrA_r6xOFvgj18dqVb5_zJQy0_TiEVw@mail.gmail.com>
	<CAGa2bXY-u8SDqeQpLuZY4yfej3VMWnF11FW+1m4Lnh3r9CUUkw@mail.gmail.com>
	<CA+p1Tcb8umQgn34bYsZL=UTGGPu3cNaaDT2zbNBDsHRrkQq-rg@mail.gmail.com>
	<CAGa2bXZJFapauPMWP7Rcmh5A5gLyjVGvKyrcXgoT_JJjsG=GBw@mail.gmail.com>
	<CA+p1Tcasmon381fb22gOJ1J1Od4q3DjxRDXOH+j_6fjGyMG4Mg@mail.gmail.com>
	<51FFFBB5.6000807@sugarcrm.com>
Date: Mon, 5 Aug 2013 20:33:35 +0100
Message-ID: <CA+p1TcYe3=hSWXN1OTGai4u+PvBx1++6uBKm2GjEyOSzaSQx0Q@mail.gmail.com>
To: Stas Malyshev <smalyshev@sugarcrm.com>
Cc: Yasuo Ohgaki <yohgaki@ohgaki.net>, PHP Internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=089e0149373c66e0a304e33862aa
Subject: Re: [PHP-DEV] Session Id Collisions
From: arraypad@gmail.com (Arpad Ray)

--089e0149373c66e0a304e33862aa
Content-Type: text/plain; charset=ISO-8859-1

Hi Stas,

On Mon, Aug 5, 2013 at 8:23 PM, Stas Malyshev <smalyshev@sugarcrm.com>wrote:

> > I'm not going to repeat my arguments against the committed solution yet
> > again, but I really think we need a better one.
>
> You are free to propose a better one. Since this topic is being
> discussed for almost 2 years and nobody came with anything better, as
> far as I know, I think it is reasonable on this stage to go with what we
> have. If you have something better that is not BC - you're welcome to
> make a pull against master, if you have something that is better and is
> BC - that's excellent, let's see it and if it works better, no problem
> getting it into 5.5.
> But as far as I see now, that is the only viable patch that we had
> during pretty long time, so sitting and waiting that something better
> comes along doesn't look like the best course of action. I think we
> waited enough so that anybody who had better solution had a chance to
> propose it and develop it, and given it is a real problem, I think at
> least solution that works for now is a good thing to have.
>

As I've said I actually think Yasuo's original patch was a better approach,
tackling the issue in session.c instead of leaving it up to all the
handlers to implement. This would break BC but solves the major flaw of the
ini setting working with some handlers and silently failing with others. I
think it's also a cleaner approach in general.

It's a real pity that missed the 5.5 boat.

I'll have a think if there's a way to do this with BC, or at least to fail
better.

Arpad

--089e0149373c66e0a304e33862aa--