Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:89863
Return-Path: <grzegorz129@gmail.com>
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Delivered-To: mailing list internals@lists.php.net
Received: (qmail 61839 invoked from network); 22 Dec 2015 08:42:33 -0000
Received: from unknown (HELO lists.php.net) (127.0.0.1)
  by localhost with SMTP; 22 Dec 2015 08:42:33 -0000
Authentication-Results: pb1.pair.com header.from=grzegorz129@gmail.com; sender-id=pass
Authentication-Results: pb1.pair.com smtp.mail=grzegorz129@gmail.com; spf=pass; sender-id=pass
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 74.125.82.53 as permitted sender)
X-PHP-List-Original-Sender: grzegorz129@gmail.com
X-Host-Fingerprint: 74.125.82.53 mail-wm0-f53.google.com  
Received: from [74.125.82.53] ([74.125.82.53:34229] helo=mail-wm0-f53.google.com)
	by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP
	id 54/89-51216-8FC09765 for <internals@lists.php.net>; Tue, 22 Dec 2015 03:42:32 -0500
Received: by mail-wm0-f53.google.com with SMTP id l126so99440294wml.1
        for <internals@lists.php.net>; Tue, 22 Dec 2015 00:42:32 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=content-type:mime-version:subject:from:in-reply-to:date:cc
         :content-transfer-encoding:message-id:references:to;
        bh=QZ/mf7VNm9dD55KQVVZCwrlAL3q0Ve9YvhvwueCNLv4=;
        b=WxNSuWdD+LIkE8rdqtm0UhT0n6EP5+dIWtTerHXTG7ztK/dLxSzx84aLgkypmDuTh9
         5uqapBKvxmdykyaWyUzPHg6MeDGIwizMbT5PVvmIDxjx1M5Gy//USygtBcOfcTuXlpBa
         pZijLOwNiJCB9dVt7ihq31Y4A3MqtAjsgHYPOjCeyKGTOQtcl/uGALJWGXuX6ZDMih2z
         sMo8gOOohkmkWWsVx4S1fS8QPSC2uQJzLN2qN5vKkhvmoRAh5UFY26muGTjpSK1yw8bt
         mW4im1zsLD4iUfi7O7sfsl9YnhT2GhQcbJx+N/jwhhCfHcDiH66M/L0CQFJXb+GNH1vz
         YJpA==
X-Received: by 10.28.148.82 with SMTP id w79mr19217781wmd.71.1450773749010;
        Tue, 22 Dec 2015 00:42:29 -0800 (PST)
Received: from [192.168.225.128] ([94.42.85.242])
        by smtp.gmail.com with ESMTPSA id x125sm23552308wmg.1.2015.12.22.00.42.28
        (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
        Tue, 22 Dec 2015 00:42:28 -0800 (PST)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 9.2 \(3112\))
In-Reply-To: <CAGa2bXbJTjwdgL++o75tWir=HbCeioBVtyFyauD0et8CEjmnLg@mail.gmail.com>
Date: Tue, 22 Dec 2015 09:42:26 +0100
Cc: Mike Willbanks <pencap@gmail.com>,
 "internals@lists.php.net" <internals@lists.php.net>
Content-Transfer-Encoding: quoted-printable
Message-ID: <F2DF56F7-C2D2-4F5B-8123-08C29681068B@gmail.com>
References: <CAGa2bXbg_kebBVg3tSh4uFHZ6nQXRbjUXNQa0JZx9sezQqb5kg@mail.gmail.com> <CAGa2bXaiqHvAxW4OdcAWfGk2KpMW9ZmZsODSK7W2p4j6_FL79w@mail.gmail.com> <CALrkBjaWRc-1=HKZOm3gOuRSNyjUuW94PdYDOdOg1sQOOqXXgg@mail.gmail.com> <CAGa2bXbJTjwdgL++o75tWir=HbCeioBVtyFyauD0et8CEjmnLg@mail.gmail.com>
To: Yasuo Ohgaki <yohgaki@ohgaki.net>
X-Mailer: Apple Mail (2.3112)
Subject: Re: [PHP-DEV] [RFC Discussion] Precise Session Management
From: grzegorz129@gmail.com (Grzegorz Zdanowski)


> On 22 Dec 2015, at 06:37, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:
> (=E2=80=A6)
> =46rom user point of view, $_SESSION['__SESSION_INTERNAL__'] is a new =
reserved/
> restricted session key.
>=20

Personally I think it=E2=80=99s a bad way to handle such thing. Adding =
yet another =E2=80=9Emagic=E2=80=9C=20
keyword/reserved field is going to make current situation worse.
I know users should not use names starting with __, but in reality I see =
them=20
almost everyday. I even seen __SESSION_INTERNAL__ used once.

=E2=80=94
Grzegorz Zdanowski=