[Phpmyadmin-devel] about transparent session ids

Marc Delisle marc at infomarc.info
Mon Dec 5 12:04:32 CET 2011


Le 2011-12-05 02:08, Michal Čihař a écrit :
> Hi
>
> Dne Sun, 04 Dec 2011 06:19:56 -0500
> Marc Delisle<marc at infomarc.info>  napsal(a):
>
>> Working on this bug [0], I noticed that when using the 'signon' auth_type
>> - invalid JSON is produced
>> - lots of XHTML errors can be seen with HTML Validator
>>
>> However, disabling
>> @ini_set('session.use_trans_sid', true);
>> in libraries/session.inc.php fixes all these problems.
>>
>> Doing so would require users to enable cookies in their browser but it's
>> already a requirement per Documentation.html.
>>
>> Opinions?
>
> Makes sense (though I think PHP should not append SID when cookies are
> enabled).

It does, when we are using the signon auth_type; maybe because there are 
two sessions involved, or because output has occurred before opening the 
sessions. I could not find the exact reason.


-- 
Marc Delisle
http://infomarc.info




More information about the Developers mailing list