2009年4月27日星期一

[fw-core] Zend_Session::regenerateId timing issue in Safari and IE

It appears I have the same issue
http://www.nabble.com/concerned-about-regenerating-id-td13896143.html#a13896143
reported back in Nov 2007 by Ergo.

I want to regenerate the session id on every request as recommended in the
documentation, but there seems to be a timing problem on Safari and IE. If
users make several requests very quickly, the session is lost.

Ergo suggests a work around, namely calling PHP's session_regenerate_id()
directly without the true argument. This seems to work for me, but it
appears Zend_Session::regenerateId() stores some internal state that will
not be set using this approach.

My questions is, should I call session_regenerate_id() directly or is there
some other recommended solution?

- Steve W.
--
View this message in context: http://www.nabble.com/Zend_Session%3A%3AregenerateId-timing-issue-in-Safari-and-IE-tp23266716p23266716.html
Sent from the Zend Core mailing list archive at Nabble.com.

没有评论: