Ilia Alshanetsky
7bf62c33af
Fixed a possible open_basedir/safe_mode bypass in session extension identified by Grzegorz Stachowiak.
2010-01-31 18:06:29 +00:00
Sebastian Bergmann
22f4ef45fe
sed -i "s#1997-2009#1997-2010#g" **/*.c **/*.h **/*.php
2010-01-03 09:23:27 +00:00
Rasmus Lerdorf
c18de79265
Along with the valid char set, also add a length check to the
...
session id here to avoid a lower-level error on the open()
later on in case we exceed MAX_PATH. The lower level open()
error includes the session dir path in it, so this is a very
low-priority security fix. People should not be running
production systems with display_errors turned on.
2009-12-26 23:38:25 +00:00
Stanislav Malyshev
7b0d41535e
protect http_session_vars from interrupt corruption
...
improve save_path check
2009-12-04 01:21:32 +00:00
Guenter Knauf
1dd4f70563
removed now obsolete NetWare hack since I fixed this
...
with Novell some longer time ago in their SDK header.
2009-11-03 21:21:34 +00:00
Kalle Sommer Nielsen
fef66b3c2d
Kill compiler warnings
2009-08-01 14:45:42 +00:00
Antony Dovgal
ae340374b2
configure dependency has to be optional as well
2009-07-28 08:59:08 +00:00
Antony Dovgal
69dba3c996
fix segfault in session/tests/031.phpt by adding optional extension
...
dependency (php_hash_hashtable has to be initialized when setting
session.hash_function)
2009-07-28 08:54:23 +00:00
Gwynne Raskind
aec7f21a86
fix crash when session hash function generated long hashes with hash_bits_per_character larger than 4
2009-07-17 14:21:31 +00:00
Jani Taskinen
2e1b73d221
fix test
2009-05-26 10:12:41 +00:00
Felipe Pena
6d34e06a2f
- Dropped *_TEXT* macros in favor of unicode macros direct usage
2009-05-25 14:32:15 +00:00
Antony Dovgal
cf3b4ba968
fix build
2009-05-19 07:40:51 +00:00
Jani Taskinen
1aee5ff9fc
- WS + sync with PHP_5_3 (thanks Ilia & Co.)
2009-05-18 16:09:51 +00:00
Hannes Magnusson
4b00c4459d
Add a test for bug#42596 so people wont try bogusly fixing it again
2009-04-06 12:11:32 +00:00
Hannes Magnusson
4606ffd151
Fix segfault on invalid session.save_path
2009-04-06 11:48:26 +00:00
Felipe Pena
8ecf8ede1f
- Removed:
...
- UG(unicode) checks
- pcre_cache_entry.unicode_mode
- Changed:
- ZEND_STR_TYPE -> IS_UNICODE
- convert_to_text -> convert_to_unicode
- convert_to_text_ex -> convert_to_unicode_ex
(Felipe, Steph)
2009-03-26 20:02:53 +00:00
Marcus Boerger
d4f5b3f0a9
- This is PHP 6 - if this ... ever gets out
2009-03-10 23:40:06 +00:00
Felipe Pena
aa6580c0ac
- Fixed tests
2009-01-05 19:04:27 +00:00
Felipe Pena
d23d2f358c
- Fixed tests
2009-01-05 17:53:53 +00:00
Sebastian Bergmann
7f4dc8702a
Bump copyright year, 3 of 3.
2008-12-31 11:12:40 +00:00
Andrei Zmievski
65ec64a825
Add mod_files.bat (equivalent to mod_files.sh).
2008-12-30 19:37:08 +00:00
Scott MacVicar
86fe80b580
Fix bug #35975 - Session cookie expires date format isn't the most compatible. Sync to that of setcookie().
2008-12-11 01:20:58 +00:00
Ant Phillips
d88187cf94
Latest and greatest versions of these session tests - checked on 6.0 snap on Windows, Linux and Linux 64 bit.
2008-11-27 13:49:45 +00:00
Felipe Pena
43791516db
- Added 'static' into ZEND_BEGIN_ARG_INFO_EX macro (again!)
2008-11-17 11:26:25 +00:00
Felipe Pena
e006a89e71
- Revert ZEND_BEGIN_ARG_INFO change
2008-11-02 21:10:13 +00:00
Felipe Pena
7eb2715464
- Added 'static' into ZEND_BEGIN_ARG_INFO_EX macro
2008-10-24 14:34:17 +00:00
Arnaud Le Blanc
429b4293bb
Avoid updating upload progress information too frequently on high transfert
...
rate.
[DOC] (HEAD only)
Added session.upload_progress.min_freq
http://wiki.php.net/rfc/session_upload_progress
2008-09-27 09:08:41 +00:00
Arnaud Le Blanc
4f66ff6e76
Added ability to cancel upload in rfc1867 handler
2008-09-17 17:22:07 +00:00
Arnaud Le Blanc
ef1b4f2698
Added tests
2008-09-11 11:52:02 +00:00
Arnaud Le Blanc
870c5e1c31
Implemented ability to provide upload progress feedback through session
...
data.
2008-09-11 11:51:07 +00:00
Jani Taskinen
bb671336e1
MFB
2008-09-07 18:00:25 +00:00
Kalle Sommer Nielsen
fe30c1c207
Fix test on Windows
2008-09-07 00:42:29 +00:00
Alexey Zakhlestin
168e8b9a44
remove special treatment of /tmp path
2008-08-31 14:50:10 +00:00
Alexey Zakhlestin
cc81177900
MFB: this test depends on session.hash_bits_per_character, but it was not explicitly set
2008-08-26 16:51:18 +00:00
Jani Taskinen
2faeee57f4
- Fixed some inconsistencies with the behaviour of sessions. Changed session_start() to return false when session start fails.
2008-08-06 05:34:55 +00:00
Jani Taskinen
ea0dbec8b7
- MFB: sync parameter parsing API changes in session_set_save_handler()
2008-08-06 04:48:39 +00:00
Jani Taskinen
fec6668d2d
- MFB: snprintf -> slprintf, nuketh extra folding tags, ws fixes
2008-08-06 04:24:55 +00:00
Jani Taskinen
41a05672ad
ws + folding tags
2008-08-06 00:36:14 +00:00
Jani Taskinen
5a125d3d24
- Nuke ending period
2008-08-05 22:52:35 +00:00
Kalle Sommer Nielsen
32db74f2e0
Fixes #45406 - Patch by oleg dot grenrus at dynamoid dot com
2008-08-04 06:18:27 +00:00
Felipe Pena
611ecc5111
- Added parameter TSRMLS_DC in zend_is_callable()
2008-08-02 04:40:45 +00:00
Dmitry Stogov
0cfa6a5977
support for closures
2008-07-17 09:52:51 +00:00
Jani Taskinen
5cd7c95e5c
- Fix tests (do NOT assume things in php.ini always to be same...or sane)
2008-07-15 00:59:29 +00:00
Felipe Pena
474bcc8cc1
- MFB: Added arginfo
2008-06-27 16:37:03 +00:00
Steph Fox
4be7f4aecd
- killed off UEXPECT
...
- com_dotnet gets a .cvsignore
- Ulf will take care of mysql extensions, rest complete
2008-05-27 18:16:04 +00:00
Felipe Pena
52c0057c63
- Removed UEXPECT(F)
2008-05-27 12:17:40 +00:00
Antony Dovgal
76d9064cc7
use ZEND_U_CONVERTER() macro to prevent segfaults when the converter is not set (i.e. NULL)
2008-05-21 12:01:55 +00:00
Ant Phillips
b3e6072a04
Fix session test failures as reported by Antony Dovgal.
...
These were caused by the tests assuming default values for some session
configuration settings, in particular session.save_path and session.name.
The tests now explicitly set these settings in the --INI-- section.
2008-04-30 15:20:17 +00:00
Ant Phillips
3edf8bd266
Fix session test failures as reported by Antony Dovgal.
...
These were caused by the tests assuming default values for some session
configuration settings, in particular session.save_path and session.name.
The tests now explicitly set these settings in the --INI-- section.
2008-04-30 09:28:00 +00:00
Ant Phillips
6b00f44934
More session tests to improve code coverage for untested extension code
2008-04-29 09:24:18 +00:00
