Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:84217
Return-Path: <yohgaki@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 62353 invoked from network); 3 Mar 2015 07:26:08 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 3 Mar 2015 07:26:08 -0000
Authentication-Results: pb1.pair.com header.from=yohgaki@gmail.com; sender-id=pass
Authentication-Results: pb1.pair.com smtp.mail=yohgaki@gmail.com; spf=pass; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.192.48 as permitted sender)
X-PHP-List-Original-Sender: yohgaki@gmail.com
X-Host-Fingerprint: 209.85.192.48 mail-qg0-f48.google.com  
Received: from [209.85.192.48] ([209.85.192.48:51507] helo=mail-qg0-f48.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id B0/91-48125-D0265F45 for <internals@lists.php.net>; Tue, 03 Mar 2015 02:26:05 -0500
Received: by mail-qg0-f48.google.com with SMTP id q107so17986100qgd.7
        for <internals@lists.php.net>; Mon, 02 Mar 2015 23:26:02 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:sender:in-reply-to:references:from:date:message-id
         :subject:to:content-type;
        bh=/CjenjPMPkpPFGHvOgY+7GUDKHjOOmeJgOmtH6K3OGA=;
        b=tsRDt7ZyvPWDQjpN4yAFtid1bOIa+YVbotRv7uLzbL7wthACG+cDsVWwKHZ0Hjs3hR
         sLBd4hjBM4VWDUaXsJpVPjqZiE1uqy0MrmaTYq9lOK1LBU+k7uhHPuaKLKpSCovrjfMz
         Nk77pDvdusWtb5kEe3CsoTHKNqh7MVUuxWdDNzcU8ftWhNeIk+0q0Id8HcPb2duMHGZg
         /olYPQkIBWr341P1+2ViW/5tj3x6YbvbdJYwdHwYFhJB5MZmlgZwCRjZ8ywBoN+zodq+
         4f3WGQSCsXTTwV/nuOpOeWKfioCPhrlW4M1Od3c87EGVSblyPgT+/Kz2iibcWyd5diJL
         cI3w==
X-Received: by 10.55.41.106 with SMTP id p103mr9619315qkh.102.1425367562074;
 Mon, 02 Mar 2015 23:26:02 -0800 (PST)
MIME-Version: 1.0
Sender: yohgaki@gmail.com
Received: by 10.229.198.8 with HTTP; Mon, 2 Mar 2015 23:25:13 -0800 (PST)
In-Reply-To: <CAGa2bXb2qm3Y0S_dVDe+Orh6kbuuQOOgLNc_VwycZCCiSxPZ2w@mail.gmail.com>
References: <CAGa2bXb2qm3Y0S_dVDe+Orh6kbuuQOOgLNc_VwycZCCiSxPZ2w@mail.gmail.com>
Date: Tue, 3 Mar 2015 16:25:13 +0900
X-Google-Sender-Auth: nFvwSuoHbvJ_QXZFZPCyCRYmbhk
Message-ID: <CAGa2bXaLzn4-Tvss_pT=Sxjk_hi4jF6pxdt-HrEChQiqCVdVvA@mail.gmail.com>
To: "internals@lists.php.net" <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=001a11406c9a36427a05105d3f8c
Subject: Re: Bug #69127 session_regenerate_id(true) randomly generates a
 warning and loses session data
From: yohgaki@ohgaki.net (Yasuo Ohgaki)

--001a11406c9a36427a05105d3f8c
Content-Type: text/plain; charset=UTF-8

Hi all,

On Sun, Mar 1, 2015 at 1:53 PM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:

>
>
> https://bugs.php.net/bug.php?id=69127
>
> This bug is known fatal bug for session module. I proposed "lazy_destroy"
> to fix
> this before, but it declined.
>
> I think the name was wrong. With the proposal, session module destories
> session data with lazy manner, but it's actually precise manner. i.e.
> Session
> module and browser is _not_ synced, so destroy must be done async manner
> (~= lazy manner. For example, delete session data 60 seconds later).
>
> The reason why session_regenerate_id(true) fails is it deletes session data
> immediately even if session and browser is not in sync. Session and browser
> cannot sync because there is no means in HTTP/Cookie.
>
> Is there any other better idea for this?
>

This is one of the most important problem for me.
Currently, session module is not working well enough as this bug report
shows.

If anyone do not come up with better idea, I would like to fix this by
deleting
old session data after certain amount of time.

Any ideas?

Regards,

--
Yasuo Ohgaki
yohgaki@ohgaki.net

--001a11406c9a36427a05105d3f8c--