Hello, The RFC mentions "Without session_create_id(), user has to implement their own bin_to_readable() in user land.". This pretty much makes it clear that a userland implementation is feasible, and thus it should indeed be implemented in userland when possible.
That's my reasoning for voting "no". Cheers, Marco Pivetta http://twitter.com/Ocramius http://ocramius.github.com/ On Wed, Aug 10, 2016 at 11:14 AM, Yasuo Ohgaki <yohg...@ohgaki.net> wrote: > Hi all, > > This is RFC for adding session_create_id() function. > > Session ID string uses special binary to string conversion. Users > should write lengthy and slow code to have the same session ID string > as session module does. It also validates and makes sure generated > session ID string has no collision. (This cannot be done easily by > user script and 3rd party C written save handlers) > > https://wiki.php.net/rfc/session-create-id > It requires 2/3 majority to pass. > Vote starts: 2016/08/10 - Vote ends: 2016/08/17 23:59:59 UTC > > Thank you for voting! > > -- > Yasuo Ohgaki > yohg...@ohgaki.net > > -- > PHP Internals - PHP Runtime Development Mailing List > To unsubscribe, visit: http://www.php.net/unsub.php > >