Hello,

The RFC mentions "Without session_create_id(), user has to implement their
own bin_to_readable() in user land.".
This pretty much makes it clear that a userland implementation is feasible,
and thus it should indeed be implemented in userland when possible.

That's my reasoning for voting "no".

Cheers,


Marco Pivetta

http://twitter.com/Ocramius

http://ocramius.github.com/

On Wed, Aug 10, 2016 at 11:14 AM, Yasuo Ohgaki <yohg...@ohgaki.net> wrote:

> Hi all,
>
> This is RFC for adding session_create_id() function.
>
> Session ID string uses special binary to string conversion. Users
> should write lengthy and slow code to have the same session ID string
> as session module does. It also validates and makes sure generated
> session ID string has no collision. (This cannot be done easily by
> user script and 3rd party C written save handlers)
>
> https://wiki.php.net/rfc/session-create-id
> It requires 2/3 majority to pass.
> Vote starts: 2016/08/10  - Vote ends: 2016/08/17 23:59:59 UTC
>
> Thank you for voting!
>
> --
> Yasuo Ohgaki
> yohg...@ohgaki.net
>
> --
> PHP Internals - PHP Runtime Development Mailing List
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>

Reply via email to