Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:92397
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain devilix.net designates 209.85.218.53 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <CAGa2bXYSLBXPQ_JRFFDt_mPqjY5JL8qo-K2teZ8xn6ja2T7gbA@mail.gmail.com>
References: <CAGa2bXb-jON8qZyje_ETckyO-KCmcbhTjcJt=NJZ1agAgzqMoQ@mail.gmail.com>
	<CAPhkiZx7zc1=1zyx=vJvZtr7x7OhktDFCHMK4GdOCD_DSqbKCg@mail.gmail.com>
	<CAGa2bXaZnsGnrKAAPmxHG+hut3+1=8bdOER--WrsXXowoiXu=A@mail.gmail.com>
	<CAPhkiZyHruaK9NM4C-4PcQ-2x4QK52Lv+JAyhLHoP=ufcufjWw@mail.gmail.com>
	<CAGa2bXb14ucv2PyHeVHMTcvUrqXD+QehqYHiBZtsqcXW1tgjXA@mail.gmail.com>
	<570D2F74.7060702@gmail.com>
	<CAGa2bXaysM4jcdOzW9ZXzFD_XOgkxphTH_JC0__HEYTNeCniHw@mail.gmail.com>
	<57115F42.2030502@gmail.com>
	<CAGa2bXYSLBXPQ_JRFFDt_mPqjY5JL8qo-K2teZ8xn6ja2T7gbA@mail.gmail.com>
Date: Mon, 18 Apr 2016 10:51:37 +0300
Message-ID: <CAPhkiZyLWyxwQfxiqqziDuHRm8O4vL1vb=1D=nvGbPzxs3intg@mail.gmail.com>
To: Yasuo Ohgaki <yohgaki@ohgaki.net>
Cc: Stanislav Malyshev <smalyshev@gmail.com>, 
	"internals@lists.php.net" <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=001a114087aa5e3cb70530bda15b
Subject: Re: [PHP-DEV] [RFC][Discussion] Add session_gc()
From: narf@devilix.net (Andrey Andreev)

--001a114087aa5e3cb70530bda15b
Content-Type: text/plain; charset=UTF-8

Hi,

On Mon, Apr 18, 2016 at 3:26 AM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote:

>
> Probability based GC is unreliable and can reactivate very old sessions
> without "Precise session management RFC" and you opposed the RFC.
>
>
While I agree that calling session_gc() on a regular basis is the better
option, that doesn't mean probability-based GC is inherently unreliable.

The problem you're referring to here is a logical one, not caused by the
API, and is easily fixable - we just have to call SessionHandler::gc()
before the current session is initialized. That is, before
SessionHandler::read(), but after SessionHandler::open().
In fact, I think you've mentioned this before, so it's not like you don't
know about it.

Cheers,
Andrey.

--001a114087aa5e3cb70530bda15b--