On Tue, 7 Dec 2004 14:20:58 +0100 (CET)
Sascha Schumann <[EMAIL PROTECTED]> wrote:
> > setting session.cookie_lifetime to non-zero value leads to
> > session invalidation in that time, even if the session is
> > active and the user is still working with it.
>
> Your change affected the code
setting session.cookie_lifetime to non-zero value leads to
session invalidation in that time, even if the session is
active and the user is still working with it.
Your change affected the code path of standard session
cookies which don't have an explicit expiry date. There is
no point
On Tue, 7 Dec 2004 13:56:36 +0100 (CET)
Sascha Schumann <[EMAIL PROTECTED]> wrote:
> On Tue, 7 Dec 2004, Antony Dovgal wrote:
>
> > On Tue, 7 Dec 2004 13:22:15 +0100 (CET)
> > Sascha Schumann <[EMAIL PROTECTED]> wrote:
> >
> >> Please revert. It is intentional that a cookie is only sent
> >
On Tue, 7 Dec 2004, Antony Dovgal wrote:
On Tue, 7 Dec 2004 13:22:15 +0100 (CET)
Sascha Schumann <[EMAIL PROTECTED]> wrote:
Please revert. It is intentional that a cookie is only sent
when the client has not yet transferred the same session id
to us using a cookie.
5.0 & 5.1 behave
On Tue, 7 Dec 2004 13:22:15 +0100 (CET)
Sascha Schumann <[EMAIL PROTECTED]> wrote:
> Please revert. It is intentional that a cookie is only sent
> when the client has not yet transferred the same session id
> to us using a cookie.
5.0 & 5.1 behave wrong then, as they send cookie o
Please revert. It is intentional that a cookie is only sent
when the client has not yet transferred the same session id
to us using a cookie.
- Sascha
On Tue, 7 Dec 2004, Antony Dovgal wrote:
tony2001Tue Dec 7 03:21:39 2004 EDT
Modified files: (Branch