Sascha Schumann
237da469d7
format string fix
2003-08-28 17:34:33 +00:00
foobar
625600af30
- Prevent crash if non-existing save/serializer handler is tried to be used
...
- Added the registered serializers information to MINFO.
2003-08-26 02:03:41 +00:00
Ilia Alshanetsky
b9b75991e3
Fixed bug #25084 (Make refer check not dependant on register_globals)
2003-08-14 01:30:06 +00:00
Ilia Alshanetsky
93bcd55eaf
emalloc -> safe_emalloc
2003-08-12 00:58:52 +00:00
Ilia Alshanetsky
22c3346967
Fixed bug #22245 (References inside $_SESSION not being handled).
2003-08-11 19:20:44 +00:00
Sascha Schumann
5978734f30
MFB proper fix for #24592
2003-07-22 01:11:07 +00:00
Ilia Alshanetsky
f9a8fc0c09
Fixed bug #24592 (Possible crash in session extnsion, with NULL values)
2003-07-21 21:47:52 +00:00
James Cox
f68c7ff249
updating license information in the headers.
2003-06-10 20:04:29 +00:00
Sascha Schumann
3c58f69fc4
Print NOTICE upon session_start being called while another session is
...
active
2003-06-10 03:56:23 +00:00
foobar
bfe9e39673
MFB: fix proto
2003-05-31 02:33:55 +00:00
foobar
ed1378a975
MFB: Always send a new session cookie upon regenerating id
2003-05-31 02:33:21 +00:00
Sascha Schumann
289ad3960e
Fix the way we create references to (sometimes non-)existing
...
variables.
Credits go to Rob Richards <rrichards@digarc.com> and Zeev
2003-05-15 13:33:18 +00:00
Stanislav Malyshev
cddface7f1
fix TSRM
2003-04-27 16:18:43 +00:00
Stanislav Malyshev
cad71d8c92
MFB 4_3:
...
Fix very nasty bug - session cookie kills one of the cookies
set before it on certain non-Apache SAPIs.
# for example, this code:
# <?
# setcookie("abc", 1);
# setcookie("def", 2);
# session_start();
# ?>
# would output only 'def' cookie on CGI and ISAPI
2003-04-27 16:04:53 +00:00
Sascha Schumann
4226fe67d1
dividend -> divisor
...
Submitted by: Jesus M. Castagnetto <jmcastagnetto@yahoo.com>
2003-04-05 11:22:15 +00:00
Sebastian Bergmann
5ca078779a
Eliminate some TSRMLS_FETCH() calls. Tested with Win32 build of SAPI/CGI and SAPI/CLI on Win32.
2003-03-25 08:07:13 +00:00
foobar
3c9155e0cb
Renamed OnUpdateInt -> OnUpdateLong to prevent further misunderstandings.
...
# Intentionally left out any 'alias' for it, this way 3rd party extension
# maintainers will really NOTICE the change.
2003-03-07 05:15:28 +00:00
Zeev Suraski
4e55747a2b
Add JIT initialization for _SERVER and _ENV
...
(it's less important for the others, even though it should be fairly
easy now too)
2003-03-02 10:19:15 +00:00
Sascha Schumann
6f5b46c118
generally urlencode parameters
2003-02-20 06:18:16 +00:00
Sascha Schumann
4ec77cfbb5
Refactor new-session-id code
2003-02-18 19:29:38 +00:00
Sascha Schumann
2699c26f42
Remember whether to send a cookie, so that we send out the correct
...
session id. Also improve check for active session
2003-02-18 19:13:49 +00:00
Sascha Schumann
32e0c8161c
add session_regenerate_id()
2003-02-18 18:50:44 +00:00
Sascha Schumann
5e601732a3
use appropiate prefixes in the ps_module structure so we don't clash
...
with syscalls
2003-02-11 00:42:14 +00:00
Ilia Alshanetsky
242a9a47c7
Fix compiler warning.
2003-01-30 22:37:50 +00:00
Sascha Schumann
330740f7cd
Remove ugly netware hacks from the code
2003-01-24 23:57:32 +00:00
Ilia Alshanetsky
3d8e54f3a2
Changed php_error to php_error_docref.
2003-01-19 00:45:53 +00:00
Ilia Alshanetsky
72b356c1bc
Removed pointless memory allocation checks.
2003-01-18 19:28:10 +00:00
Sascha Schumann
db8b4c6762
Add INI setting session.hash_bits_per_character which enables developers
...
to choose how session ids are represented, regardless of the hash algorithm.
2003-01-16 07:21:49 +00:00
Sascha Schumann
f2f1f94e36
add INI setting session.hash_function
...
add support for creating session ids using SHA-1
source more entropy for session ids
2003-01-12 13:07:14 +00:00
Zeev Suraski
ada5c4009e
Fix UMR
2003-01-08 13:28:16 +00:00
Anantha Kesari H Y
90ba724072
Modified for NetWare.
2003-01-03 14:24:07 +00:00
Sebastian Bergmann
b506f5c8f8
Bump year.
2002-12-31 16:08:15 +00:00
Ilia Alshanetsky
c731daeda7
Fixed bug #21268 (session_decode() returned FALSE on success).
2002-12-29 18:50:55 +00:00
Marcus Boerger
3cf581b1b3
correct code that is guarded by "#if 0"
2002-12-05 20:41:55 +00:00
Marcus Boerger
dcfe988820
php_error -> php_error_docref
2002-12-05 20:13:35 +00:00
Sascha Schumann
a257d758a5
Add an error message to the ini handlers
2002-11-20 17:15:00 +00:00
Sascha Schumann
e9ed065afc
add protective checks to ini updates
...
Noticed by: Derick Rethans <d.rethans@jdimedia.nl>
PR: #20284
2002-11-20 16:06:29 +00:00
Sascha Schumann
e60c601bd1
improved warning message
...
# this should really link to an external page which explains the issue deeply
2002-10-24 10:40:48 +00:00
Sascha Schumann
2dde6fb594
Print out warning only, if a variable was actually migrated
2002-10-07 02:37:50 +00:00
Sebastian Bergmann
d7f9e8526f
Silence warning.
2002-10-06 21:47:54 +00:00
Ilia Alshanetsky
6b5575a101
Code cleanup. Thanks Andi.
2002-10-06 17:17:38 +00:00
Sascha Schumann
5fe046c4c3
session_decode should not segfault
2002-10-03 15:33:00 +00:00
Sascha Schumann
7e03310a6a
Don't emit warning, if there is nothing to send
2002-10-03 15:10:36 +00:00
Andi Gutmans
b276a96f4b
- Fix ZTS build
2002-10-03 07:23:50 +00:00
Sascha Schumann
13f5db1b67
Make the interpretation of gc_probability configurable by adding
...
session.gc_dividend. The probability of running gc on each request is then
gc_probability/gc_dividend.
2002-10-03 06:45:15 +00:00
Sascha Schumann
0ed434a13b
Use ZEND_SET_SYMBOL_WITH_LENGTH correctly (hopefully)
...
It strikes me as awkward that a Zend API user needs to take care of
doing the engine's reference counting.
This fixes a memory overrun in a testcase. All ZEND_SET_* calls
should be correct now.
2002-10-03 06:29:58 +00:00
Sascha Schumann
15b23945ad
(track_init) Use is_ref/refcount parameters of SET_SYMBOL macros
...
(save_current_state) Prevent a possible deadlock which occurs when
the track vars are inaccessible
2002-10-03 05:53:45 +00:00
Sascha Schumann
8a586103fc
Align behaviour with 4.2 with regard to register_globals=1
...
session_register("c");
unset($c);
$c = time();
If a user unsets a global session variable, it is not a reference
to a $_SESSION slot anymore.
During serialization, PHP 4.2 will not find the respective entry in
$_SESSION and fall back to the global sym table.
2002-10-03 04:53:05 +00:00
Sascha Schumann
b9077e5a9d
Nuke PS(vars), we keep the state of registered session variables now
...
completely in PS(http_session_vars). This avoids bugs which are caused
by a lack of synchronization between the two hashes. We also don't need
to worry about prioritizing one of them.
Add session.bug_compat_42 and session.bug_compat_warn which are enabled
by default. The logic behind bug_compat_42:
IF bug_compat_42 is on, and
IF register_globals is off, and
IF any value of $_SESSION["key"] is NULL, and
IF there is a global variable $key, then
$_SESSION["key"] is set to $key.
The extension emits this warning once per script, unless told otherwise.
"Your script possibly relies on a session side-effect which existed until
PHP 4.2.3. Please be advised that the session extension does not consider
global variables as a source of data, unless register_globals is enabled.
You can disable this functionality and this warning by setting
session.bug_compat_42 or session.bug_compat_warn.
2002-10-03 03:23:02 +00:00
Sascha Schumann
4ea4f294b6
Fix harmless memory leaks and simplify track_vars_init.
2002-10-02 21:51:32 +00:00
