Re: [PHP-DEV] [RFC][VOTE] Precise session management

2016-03-23 Thread Yasuo Ohgaki
Hi Stas, On Thu, Mar 24, 2016 at 5:44 AM, Stanislav Malyshev wrote: >> Offending features may be disabled/changed by INI settings. I think it ok >> to say pretty much no BC issue. > > I think this approach will lead us into problems. "It may be disabled by > INI setting"

Re: [PHP-DEV] [RFC][VOTE] Precise session management

2016-03-23 Thread Stanislav Malyshev
Hi! > Offending features may be disabled/changed by INI settings. I think it ok > to say pretty much no BC issue. I think this approach will lead us into problems. "It may be disabled by INI setting" does not mean the problem does not exist (and btw not everything that changes can be disabled

Re: [PHP-DEV] [RFC][VOTE] Precise session management

2016-03-23 Thread Yasuo Ohgaki
Hi Andrey, On Wed, Mar 23, 2016 at 5:03 AM, Andrey Andreev wrote: > > On Tue, Mar 22, 2016 at 9:52 PM, Pascal MARTIN, AFUP < > mail...@pascal-martin.fr> wrote: > >> Le 09/03/2016 10:14, Yasuo Ohgaki a écrit : >> >>> Vote starts 2016-03-09-09:00(UTC) and ends

Re: [PHP-DEV] [RFC][VOTE] Precise session management

2016-03-22 Thread Andrey Andreev
Hi, On Tue, Mar 22, 2016 at 9:52 PM, Pascal MARTIN, AFUP < mail...@pascal-martin.fr> wrote: > Le 09/03/2016 10:14, Yasuo Ohgaki a écrit : > >> Vote starts 2016-03-09-09:00(UTC) and ends 2016-03-23-09:00(UTC) >> https://wiki.php.net/rfc/precise_session_management#vote >> > > Hi, > > At AFUP, we

Re: [PHP-DEV] [RFC][VOTE] Precise session management

2016-03-22 Thread Pascal MARTIN, AFUP
Le 09/03/2016 10:14, Yasuo Ohgaki a écrit : Vote starts 2016-03-09-09:00(UTC) and ends 2016-03-23-09:00(UTC) https://wiki.php.net/rfc/precise_session_management#vote Hi, At AFUP, we would be +1 on this RFC. Basically: better security and pretty-much no bc-break, is a good thing. Thanks for

Re: [PHP-DEV] [RFC][VOTE] Precise session management

2016-03-11 Thread Yasuo Ohgaki
Hi Levi, On Sat, Mar 12, 2016 at 9:24 AM, Yasuo Ohgaki wrote: > > BC issue is not severe. Users' test scripts may find behavior changes, > but it does not affect session functionality in apps at all. (It > should not at least, if it does, it's bug) Additional note on this.

Re: [PHP-DEV] [RFC][VOTE] Precise session management

2016-03-11 Thread Yasuo Ohgaki
Hi Levi, On Sat, Mar 12, 2016 at 1:50 AM, Levi Morrison wrote: > On Wed, Mar 9, 2016 at 2:14 AM, Yasuo Ohgaki wrote: >> The RFC is >> https://wiki.php.net/rfc/precise_session_management >> The PR is >> https://github.com/php/php-src/pull/1734 >> >> I suppose

Re: [PHP-DEV] [RFC][VOTE] Precise session management

2016-03-11 Thread Levi Morrison
On Wed, Mar 9, 2016 at 2:14 AM, Yasuo Ohgaki wrote: > The RFC is > https://wiki.php.net/rfc/precise_session_management > The PR is > https://github.com/php/php-src/pull/1734 > > I suppose almost all questions and discussion is finished, but > if you have any, please

Re: [PHP-DEV] [RFC][VOTE] Precise session management

2016-03-09 Thread Yasuo Ohgaki
Hi Derick, On Thu, Mar 10, 2016 at 6:08 AM, Yasuo Ohgaki wrote: > Session module returns FALSE for invalid status, therefore it would be > better to return FALSE. IMO. However, this patch is for 7.1, so it can > be changed. If we are going to change this, it would be nicer to

Re: [PHP-DEV] [RFC][VOTE] Precise session management

2016-03-09 Thread Yasuo Ohgaki
Hi Derick, On Wed, Mar 9, 2016 at 8:48 PM, Derick Rethans wrote: >> Hi all, >> >> This mail is for RFC vote notice. >> >> The RFC is >> https://wiki.php.net/rfc/precise_session_management >> The PR is >> https://github.com/php/php-src/pull/1734 >> >> I suppose almost all

Re: [PHP-DEV] [RFC][VOTE] Precise session management

2016-03-09 Thread Derick Rethans
On Wed, 9 Mar 2016, Yasuo Ohgaki wrote: > Hi all, > > This mail is for RFC vote notice. > > The RFC is > https://wiki.php.net/rfc/precise_session_management > The PR is > https://github.com/php/php-src/pull/1734 > > I suppose almost all questions and discussion is finished, but > if you have

[PHP-DEV] [RFC][VOTE] Precise session management

2016-03-09 Thread Yasuo Ohgaki
Hi all, This mail is for RFC vote notice. The RFC is https://wiki.php.net/rfc/precise_session_management The PR is https://github.com/php/php-src/pull/1734 I suppose almost all questions and discussion is finished, but if you have any, please comment/ask. Vote starts 2016-03-09-09:00(UTC) and