summaryrefslogtreecommitdiff
path: root/ext/session
Commit message (Collapse)AuthorAgeFilesLines
* Fixed handling of session variable serialization on certain prefix ↵Ilia Alshanetsky2010-04-261-1/+1
| | | | characters. Reported by Stefan Esser
* Added test for bug #51338Ilia Alshanetsky2010-03-231-0/+15
|
* Fixed bug #51338 (URL-Rewriter is still enabled if use_only_cookies is on).Ilia Alshanetsky2010-03-221-3/+7
|
* Fixed a possible open_basedir/safe_mode bypass in session extension ↵Ilia Alshanetsky2010-01-311-1/+6
| | | | identified by Grzegorz Stachowiak.
* sed -i "s#1997-2009#1997-2010#g" **/*.c **/*.h **/*.phpSebastian Bergmann2010-01-038-8/+8
|
* Along with the valid char set, also add a length check to the Rasmus Lerdorf2009-12-261-2/+4
| | | | | | | | | session id here to avoid a lower-level error on the open() later on in case we exceed MAX_PATH. The lower level open() error includes the session dir path in it, so this is a very low-priority security fix. People should not be running production systems with display_errors turned on.
* protect http_session_vars from interrupt corruptionStanislav Malyshev2009-12-041-2/+8
| | | | | improve save_path check
* removed now obsolete NetWare hack since I fixed thisGuenter Knauf2009-11-031-7/+1
| | | | | with Novell some longer time ago in their SDK header.
* removed now obsolete NetWare hack since I fixed thisGuenter Knauf2009-11-031-4/+0
| | | | | with Novell some longer tiem ago in their SDK header.
* zend_module_dep is no const and breaks strict compilersGuenter Knauf2009-10-141-1/+1
| | | | | like CodeWarrior for NetWare.
* - Fixed bug #49503 (invalid warning for failed semaphore file creation)Jani Taskinen2009-10-081-3/+0
| | | | | # I have no idea why I had added this. Might have been some debug code.. :(
* configure dependency has to be optional as wellAntony Dovgal2009-07-281-1/+1
|
* fix segfault in session/tests/031.phpt by adding optional extensionAntony Dovgal2009-07-282-1/+10
| | | | | | dependency (php_hash_hashtable has to be initialized when setting session.hash_function)
* - Revert this, was not supposed to be merged yetJani Taskinen2009-05-261-5/+7
|
* fix testJani Taskinen2009-05-261-0/+1
|
* MFH: Sync WS / CS changes where applicableJani Taskinen2009-05-185-239/+216
|
* MF53: Sync the session.c file structure and some bug fixes forgotten to merge.Jani Taskinen2009-04-2610-754/+821
|
* MFH: Add test for bug#42596Hannes Magnusson2009-04-061-0/+32
|
* MFH: Fixed segfault on invalid session.save_pathHannes Magnusson2009-04-061-1/+1
|
* MFH: Bump copyright year, 3 of 3.Sebastian Bergmann2008-12-318-8/+8
|
* MFH Fix bug #35975 - Session cookie expires date format isn't the most ↵Scott MacVicar2008-12-111-2/+2
| | | | compatible. Sync to that of setcookie().
* Latest and greatest versions of these session tests - checked on 5.2.X snap ↵Ant Phillips2008-11-271-6/+6
| | | | on Windows, Linux and Linux 64 bit.
* Backport fix for #45406 - Patch by oleg dot grenrus at dynamoid dot comKalle Sommer Nielsen2008-08-061-0/+15
|
* MFH:- Fix tests (do NOT assume things in php.ini always to be same...or sane)Jani Taskinen2008-07-155-1/+18
|
* Fixed memory leaksDmitry Stogov2008-06-111-0/+9
|
* Fixed test (5.2 doesn't contain GC)Dmitry Stogov2008-06-111-0/+3
|
* Fix session test failures as reported by Antony Dovgal.Ant Phillips2008-04-305-4/+15
| | | | | | | These were caused by the tests assuming default values for some session configuration settings, in particular session.save_path and session.name. The tests now explicitly set these settings in the --INI-- section.
* Fix session test failures as reported by Antony Dovgal.Ant Phillips2008-04-309-0/+24
| | | | | | | These were caused by the tests assuming default values for some session configuration settings, in particular session.save_path and session.name. The tests now explicitly set these settings in the --INI-- section.
* MFH Fixed bug #44720 (Prevent infinite recursion within session_register)Scott MacVicar2008-04-291-120/+127
|
* More session tests to improve code coverage for untested extension codeAnt Phillips2008-04-292-1/+5
|
* More session tests to improve code coverage for untested extension codeAnt Phillips2008-04-2911-0/+591
|
* New set of session extension tests for PHP 5.2 branch.Ant Phillips2008-04-22106-0/+9732
| | | | | | | | These hopefully test a reasonable set of basic, error and variations for the twenty or so session functions. Note however that they do not test all the session configuration settings, nor do they test anything with register_globals enabled.
* These tests were backported from the PHP 6.0 branch, which in turn were ↵Ant Phillips2008-04-229-0/+534
| | | | ported from this branch and then updated to remove any dependencies on register_globals. With register_globals removed they are useful tests to run against the 5.X branches.
* MFH: Bump copyright year, 2 of 2.Sebastian Bergmann2007-12-318-8/+8
|
* Fixed Bug #42596 (session.save_path MODE option does not work).Ilia Alshanetsky2007-09-101-1/+1
|
* MFH: ws + cs changes (sync to ease merging patches around!)Jani Taskinen2007-08-231-38/+50
|
* MFH: syncJani Taskinen2007-08-232-2/+2
|
* Fixed bug #37273 (Symlinks and mod_files session handler allow open_basedirIlia Alshanetsky2007-08-231-0/+22
| | | | | bypass).
* correct fix for access control for save_path and .htaccessStanislav Malyshev2007-08-032-10/+2
|
* Fixed bug #42135 (Second call of session_start() causes creation of SID)Ilia Alshanetsky2007-07-291-3/+3
|
* always check save_path (issue reported by Maksymilian Arciemowicz)Stanislav Malyshev2007-07-101-1/+9
|
* Fixed compiler warningIlia Alshanetsky2007-06-171-0/+1
|
* MFHStefan Esser2007-06-161-3/+11
|
* Disallow characters that Cookie RFC does not allow in unquoted cookiesStanislav Malyshev2007-06-151-1/+1
|
* MFH: php_gmtime_r() fixesAntony Dovgal2007-06-071-2/+7
|
* Fixed bug #41600 (url rewriter tags doesn't work with namespaced tags).Ilia Alshanetsky2007-06-061-0/+26
|
* fix testsAntony Dovgal2007-05-182-0/+2
|
* do not send cookie when session is passed in URL, same as it happens with ↵Stanislav Malyshev2007-05-161-1/+4
| | | | GET/POST
* fix test namesAntony Dovgal2007-05-073-3/+3
|
* MFH: fix #40998 (long session array keys are truncated)Antony Dovgal2007-04-041-1/+1
|