>   Modified files:
>     /php4/ext/standard        head.c
>   Log:
>   Only the last cookie was getting set.  (You can have
>   more than one Set-Cookie: header, as indicated by
>   http://wp.netscape.com/newsref/std/cookie_spec.html.)
>
> -     return sapi_add_header(cookie, strlen(cookie), 0);
> +     return sapi_add_header_ex(cookie, strlen(cookie), 0, 0 TSRMLS_CC);

Yikes, what a suspicious looking patch!  This has been wrong all along for
all SAPI modules, but works, at least for the Apache 1.x case because
instead of checking the replace flag we check directly for Set-Cookie and
do an add instead of a replace in that case.  As long as other SAPI
modules ignored this incorrectly set replace flag they should be ok with
this change.  My fear is that we may have some that implemented this flag
with the reverse meaning.  So heads-up sapi module maintainers, check your
code!

-Rasmus


-- 
PHP Development Mailing List <http://www.php.net/>
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to