Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:72679 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 63877 invoked from network); 18 Feb 2014 10:56:18 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 18 Feb 2014 10:56:18 -0000 Authentication-Results: pb1.pair.com header.from=tjerk.meesters@gmail.com; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=tjerk.meesters@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.128.169 as permitted sender) X-PHP-List-Original-Sender: tjerk.meesters@gmail.com X-Host-Fingerprint: 209.85.128.169 mail-ve0-f169.google.com Received: from [209.85.128.169] ([209.85.128.169:37974] helo=mail-ve0-f169.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 28/C2-64799-15C33035 for ; Tue, 18 Feb 2014 05:56:17 -0500 Received: by mail-ve0-f169.google.com with SMTP id oy12so13314947veb.14 for ; Tue, 18 Feb 2014 02:56:14 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=YdaVYr7HBdf6PTPabC2GZsjNaX5ivnRlR+nN2bPGEo4=; b=HNSs/zFw922n0OI/e7gLHBW/1dW4OnCqn4aeIpfc9ZymCAPzxz+7RvmHzCtIyjtEiZ gHndwsgthRp7WUvu0syU6Ts18cTzBVUeHGgTSm06tEqFygQWNmAOsbSNw8mx2YicjhxQ AJT6EdS8LHcw9UkJu6R861Man+TdJfES1Co0L2wVEc5MsJCZhM86g3y+19oOw/aGou2I drLUMK6VlrJSTtXYVtWw5wuXbp27BeBvUuPGrHvCzK2cGUB806icN5a5+U50t8i6gwlO pB73Q4j1cbXpY4wD8HUIOyGp7oaM6be6c2IMIstnXBfCNrbRKaG+3dG3uwBrwzL1A3iN vcvg== MIME-Version: 1.0 X-Received: by 10.52.135.65 with SMTP id pq1mr2354752vdb.13.1392720974220; Tue, 18 Feb 2014 02:56:14 -0800 (PST) Received: by 10.58.133.229 with HTTP; Tue, 18 Feb 2014 02:56:14 -0800 (PST) In-Reply-To: References: Date: Tue, 18 Feb 2014 18:56:14 +0800 Message-ID: To: Yasuo Ohgaki Cc: Damien Tournoud , "internals@lists.php.net" Content-Type: multipart/alternative; boundary=bcaec52d5729f091aa04f2ac1e08 Subject: Re: [PHP-DEV] [VOTE] Secure Session Module Options/Internal by Default From: tjerk.meesters@gmail.com (Tjerk Meesters) --bcaec52d5729f091aa04f2ac1e08 Content-Type: text/plain; charset=ISO-8859-1 On Tue, Feb 18, 2014 at 6:49 PM, Yasuo Ohgaki wrote: > Hi Damien, > > On Tue, Feb 18, 2014 at 7:38 PM, Damien Tournoud wrote: > > > I remember that the `use_strict_mode=on` added in PHP 5.5 was broken and > > would prevent the application from setting a session ID by itself. This > is > > actually fairly common, about 800k Drupal 7 websites do that. > > > > Unless this is fixed, this setting just cannot be enabled by default. > > > > It was simple mistake during merge. It is fixed next release already. Do > not worry about it. > It seemed to be part of the patch of the respective rfc: https://gist.github.com/yohgaki/1379668#file-php-trunk-strict-session-patch-L602 How was this a merge issue? > > Regards, > > -- > Yasuo Ohgaki > yohgaki@ohgaki.net > -- -- Tjerk --bcaec52d5729f091aa04f2ac1e08--