Edit report at http://bugs.php.net/bug.php?id=8855&edit=1

 ID:                 8855
 Updated by:         [email protected]
 Reported by:        sivasubraj at lycosmail dot com
 Summary:            session_start should return also FALSE
-Status:             Open
+Status:             Closed
 Type:               Feature/Change Request
-Package:            Feature/Change Request
+Package:            *General Issues
 Operating System:   Linux Mandrake 7.2
 PHP Version:        4.0.4
-Assigned To:        
+Assigned To:        jani
 Block user comment: N
 Private report:     N

 New Comment:

Since 5.3.0 session_start() returns FALSE if starting fails.


Previous Comments:
------------------------------------------------------------------------
[2001-01-23 12:18:33] sivasubraj at lycosmail dot com

I feel that the feature I am going to describe is desirable for security
reasons: 

The function session_start should return FALSE when the GET (or cookie)
requests to resume a non-esistent phpsession. 



If there is already a (quick) way to prevent resuming non-esistent or
closed phpsessions, please let me know, else please, add the feature to
the TODO list.

(I've set session_cache_limiter('private') and I *don't* want to set it
to 'nocache').

Many thanks

Siva

------------------------------------------------------------------------



-- 
Edit this bug report at http://bugs.php.net/bug.php?id=8855&edit=1

Reply via email to