Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:73218
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 74.125.82.176 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <CAPhkiZzAxQnQpWOh7xhAM4h3r7xCYjD_P3d9mWmDX4Sr0Qc9Ng@mail.gmail.com>
References: <CAPhkiZzAxQnQpWOh7xhAM4h3r7xCYjD_P3d9mWmDX4Sr0Qc9Ng@mail.gmail.com>
Date: Mon, 17 Mar 2014 13:22:42 +0000
Message-ID: <CAPwsocHht=UAApnX_=-6MEe0_qowLvEjGhBPAMT1CWgsQOzSfw@mail.gmail.com>
To: Andrey Andreev <narf@devilix.net>
Cc: "internals@lists.php.net" <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=047d7b3a893a770a1604f4cd5018
Subject: Re: [PHP-DEV] Session: deprecating create_sid() method and add createSid()?
From: leight@gmail.com (Leigh)

--047d7b3a893a770a1604f4cd5018
Content-Type: text/plain; charset=ISO-8859-1

On 17 March 2014 10:23, Andrey Andreev <narf@devilix.net> wrote:

> Hi Yasuo,
>
> There's no SessionHandler::create_sid() or
> SessionHandlerInterface::create_sid() documented (see your own link to
> the docs) ... since when is this available?
>
> I'm not sure if exposing it is a good idea anyway, why is it necessary?
>
>

It was added in 5.5.1 - The PR was made 2 years ago by myself:
https://github.com/php/php-src/pull/109

It's not documented because I'm lazy, (it's one of those TODO items that
has become permanent), but I personally use it. The underlying method on
the session interface has been there for a long time (10 years might even
be accurate), but for some unknown reason, it was not exposed to userland
when all of the other methods were.

It is necessary for custom session handler classes because without it calls
to session_regenerate_id() do not inform the session handler about the
change of session id. The presence of this method allows you to capture
session id regeneration, and update files, databases, etc. as necessary,
and also allows you to fully customise the actual session id token that is
used. Custom prefixes, body content, encoding charset, etc.

Cheers,

Leigh.

--047d7b3a893a770a1604f4cd5018--