tony2001                Fri May 20 06:28:17 2005 EDT

  Modified files:              (Branch: PHP_5_0)
    /php-src/ext/session        session.c 
    /php-src    NEWS 
  Log:
  MFH: fix bug #32944 (Disabling session.use_cookies doesn't prevent reading 
session cookies)
  
  
http://cvs.php.net/diff.php/php-src/ext/session/session.c?r1=1.391.2.11&r2=1.391.2.12&ty=u
Index: php-src/ext/session/session.c
diff -u php-src/ext/session/session.c:1.391.2.11 
php-src/ext/session/session.c:1.391.2.12
--- php-src/ext/session/session.c:1.391.2.11    Wed Mar 23 19:17:53 2005
+++ php-src/ext/session/session.c       Fri May 20 06:28:16 2005
@@ -17,7 +17,7 @@
    +----------------------------------------------------------------------+
  */
 
-/* $Id: session.c,v 1.391.2.11 2005/03/24 00:17:53 tony2001 Exp $ */
+/* $Id: session.c,v 1.391.2.12 2005/05/20 10:28:16 tony2001 Exp $ */
 
 #ifdef HAVE_CONFIG_H
 #include "config.h"
@@ -1134,7 +1134,7 @@
         */
 
        if (!PS(id)) {
-               if (zend_hash_find(&EG(symbol_table), "_COOKIE",
+               if (PS(use_cookies) && zend_hash_find(&EG(symbol_table), 
"_COOKIE",
                                        sizeof("_COOKIE"), (void **) &data) == 
SUCCESS &&
                                Z_TYPE_PP(data) == IS_ARRAY &&
                                zend_hash_find(Z_ARRVAL_PP(data), 
PS(session_name),
http://cvs.php.net/diff.php/php-src/NEWS?r1=1.1760.2.388&r2=1.1760.2.389&ty=u
Index: php-src/NEWS
diff -u php-src/NEWS:1.1760.2.388 php-src/NEWS:1.1760.2.389
--- php-src/NEWS:1.1760.2.388   Fri May 20 02:37:30 2005
+++ php-src/NEWS        Fri May 20 06:28:16 2005
@@ -18,6 +18,8 @@
   (jwozniak23 at poczta dot onet dot pl, Tony).
 - Fixed bug #32956 (mysql_bind_result() doesn't support MYSQL_TYPE_NULL). 
(Georg)
 - Fixed bug #32947 (Incorrect option for mysqli default password). (Georg)
+- Fixed bug #32944 (Disabling session.use_cookies doesn't prevent reading 
+  session cookies). (Jani, Tony)
 - Fixed bug #32936 (http redirects URLs are not checked for control chars). 
(Ilia)
 - Fixed bug #32932 (Oracle LDAP: ldap_get_entries(), invalid pointer). (Jani)
 - Fixed bug #32930 (class extending DOMDocument doesn't clone properly). (Rob)

-- 
PHP CVS Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to