Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:84225
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain devilix.net designates 209.85.223.178 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <CAGa2bXaLzn4-Tvss_pT=Sxjk_hi4jF6pxdt-HrEChQiqCVdVvA@mail.gmail.com>
References: <CAGa2bXb2qm3Y0S_dVDe+Orh6kbuuQOOgLNc_VwycZCCiSxPZ2w@mail.gmail.com>
	<CAGa2bXaLzn4-Tvss_pT=Sxjk_hi4jF6pxdt-HrEChQiqCVdVvA@mail.gmail.com>
Date: Tue, 3 Mar 2015 12:40:41 +0200
Message-ID: <CAPhkiZw=Lgz=_q=pDCobv3nCG5bwcyqOpTV91W=H+Pb59H2OzA@mail.gmail.com>
To: Yasuo Ohgaki <yohgaki@ohgaki.net>
Cc: "internals@lists.php.net" <internals@lists.php.net>
Content-Type: text/plain; charset=UTF-8
Subject: Re: [PHP-DEV] Re: Bug #69127 session_regenerate_id(true) randomly
 generates a warning and loses session data
From: narf@devilix.net (Andrey Andreev)

Hi,

On Tue, Mar 3, 2015 at 9:25 AM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:
> Hi all,
>
> On Sun, Mar 1, 2015 at 1:53 PM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:
>
>>
>>
>> https://bugs.php.net/bug.php?id=69127
>>
>> This bug is known fatal bug for session module. I proposed "lazy_destroy"
>> to fix
>> this before, but it declined.
>>
>> I think the name was wrong. With the proposal, session module destories
>> session data with lazy manner, but it's actually precise manner. i.e.
>> Session
>> module and browser is _not_ synced, so destroy must be done async manner
>> (~= lazy manner. For example, delete session data 60 seconds later).
>>
>> The reason why session_regenerate_id(true) fails is it deletes session data
>> immediately even if session and browser is not in sync. Session and browser
>> cannot sync because there is no means in HTTP/Cookie.
>>
>> Is there any other better idea for this?
>>
>
> This is one of the most important problem for me.
> Currently, session module is not working well enough as this bug report
> shows.
>
> If anyone do not come up with better idea, I would like to fix this by
> deleting
> old session data after certain amount of time.
>
> Any ideas?
>

Why do you want to change it at all? If you don't want the data to get
immediately deleted, pass FALSE to the function and let the GC erase
it later.

Cheers,
Andrey.