Re: [Phpmyadmin-devel] about transparent session ids

Le 2011-12-05 02:08, Michal Čihař a écrit :

Hi

Dne Sun, 04 Dec 2011 06:19:56 -0500 Marc Delislemarc@infomarc.info napsal(a):

...

Working on this bug [0], I noticed that when using the 'signon' auth_type

• invalid JSON is produced
• lots of XHTML errors can be seen with HTML Validator

However, disabling @ini_set('session.use_trans_sid', true); in libraries/session.inc.php fixes all these problems.

Doing so would require users to enable cookies in their browser but it's already a requirement per Documentation.html.

Opinions?

Makes sense (though I think PHP should not append SID when cookies are enabled).

It does, when we are using the signon auth_type; maybe because there are two sessions involved, or because output has occurred before opening the sessions. I could not find the exact reason.