Rasmus Lerdorf wrote: > Ok, then that is a bug that needs to be fixed before 4.3.
This is one of the current session module behavior that I worry. We need at least strlen. (and char range check) I check them both in my save handler. (Not published session_pgsql, but my private session save handler) -- Yasuo Ohgaki -- PHP Development Mailing List <http://www.php.net/> To unsubscribe, visit: http://www.php.net/unsub.php