Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:69329
Return-Path: <yohgaki@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 61811 invoked from network); 25 Sep 2013 03:56:08 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 25 Sep 2013 03:56:08 -0000
Authentication-Results: pb1.pair.com smtp.mail=yohgaki@gmail.com; spf=pass; sender-id=pass
Authentication-Results: pb1.pair.com header.from=yohgaki@gmail.com; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.215.49 as permitted sender)
X-PHP-List-Original-Sender: yohgaki@gmail.com
X-Host-Fingerprint: 209.85.215.49 mail-la0-f49.google.com  
Received: from [209.85.215.49] ([209.85.215.49:48809] helo=mail-la0-f49.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id EC/60-59863-7DE52425 for <internals@lists.php.net>; Tue, 24 Sep 2013 23:56:08 -0400
Received: by mail-la0-f49.google.com with SMTP id ev20so4373933lab.36
        for <internals@lists.php.net>; Tue, 24 Sep 2013 20:56:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:sender:in-reply-to:references:from:date:message-id
         :subject:to:cc:content-type;
        bh=NZBqBcBvM5kdy37G8v1vBoTin+WryWW8nJEUkbVgcf4=;
        b=uQZhPy6AlL3JdpN9IECH/b+7OARY/2ziTdwE3uYeh8sKaLHrcVWeCTkaJK3eLvOxz8
         oUYy97I+41gbfz9Wlwy2eUIECKR94u/P/QuA0vdeKZLziPvK97h9wZ3A7eZpN7BdJakp
         saztLBuvV4PQ/40fVqWruvJDUJ7mWIQJdLNMBdt37WP4/l0sIdcXKQvLRVAQb36p7149
         jqmWJaWArDzCRMkQSWM8a0MTY7xHnSWBNzkdnk08415EEQngoswPAJKbT0kIxfx2Ugsb
         4AFVC/SEUlrnd1xPIvN/tLplFpsRz/7k7eik+vPQsTcmJkrVwPGkxhqb/irVJoAjTb/v
         mA/g==
X-Received: by 10.152.36.98 with SMTP id p2mr27977799laj.14.1380081364112;
 Tue, 24 Sep 2013 20:56:04 -0700 (PDT)
MIME-Version: 1.0
Sender: yohgaki@gmail.com
Received: by 10.112.154.201 with HTTP; Tue, 24 Sep 2013 20:55:23 -0700 (PDT)
In-Reply-To: <CABBJUpdNr6McK6Q4qtztiYYG9CKZF7AeUdvo3YM+W0S87f8nDg@mail.gmail.com>
References: <CAGa2bXbh6dOf41nZ0r-RuRtkCuuiA=r=SnxS+A1+GgqFXPGOWQ@mail.gmail.com>
 <CABBJUpdNr6McK6Q4qtztiYYG9CKZF7AeUdvo3YM+W0S87f8nDg@mail.gmail.com>
Date: Wed, 25 Sep 2013 12:55:23 +0900
X-Google-Sender-Auth: IJhXGFoTiWzph0hkUoWY6T3JHa8
Message-ID: <CAGa2bXbFcZLYAz0QfRRAMnyQmB380u+8=9DrxeQ==xhnJw4W2w@mail.gmail.com>
To: Laruence <laruence@php.net>
Cc: "internals@lists.php.net" <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=089e0158b5e878197904e72d3bfd
Subject: Re: [PHP-DEV] Regenerating session ID automatically when IP address
 has changed
From: yohgaki@ohgaki.net (Yasuo Ohgaki)

--089e0158b5e878197904e72d3bfd
Content-Type: text/plain; charset=UTF-8

Hi Laruence,

On Tue, Sep 24, 2013 at 11:42 AM, Laruence <laruence@php.net> wrote:

> I don't think this is language concerning issue.
>
> it could be done in user script..
>

Session should be managed as secure as possible.
We can promote better session management in document.
It's an option.

Regards,

--
Yasuo Ohgaki
yohgaki@ohgaki.net

--089e0158b5e878197904e72d3bfd--