php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #15322 php.ini : session.use_trans_sid=0 disables <?=SID?> session-id creation too
Submitted: 2002-02-01 08:20 UTC Modified: 2002-04-03 10:00 UTC
From: gblatz at blatzheim dot com Assigned:
Status: Closed Package: Session related
PHP Version: 4.1.1 OS: SuSe 7.3
Private report: No CVE-ID: None
View Developer Edit
 [2002-02-01 08:20 UTC] gblatz at blatzheim dot com 
Before 4.1.x I didn't compile with --enable-trans-sid and used instead the <?=SID?> expression
on pages very often.

With the new releases and --enable-trans-sid as default I now get the session-id twice on every link 
which is the expected behaviour on first hand. I didn't want to edit all pages.

My idea was to set "session.use_trans_sid=0" in php.ini to disable the auto-session generation.

After this, even <?=SID?> does no longer generate a session-id, which seems to be a bug!?

The only quick hack for the moment was to have "session.use_trans_sid=1" and to modify
the url_rewriter.tags in php.ini:

Original: url_rewriter.tags = "a=href,area=href,frame=src,input=src,form=fakeentry"

Modified: url_rewriter.tags = "area=href,frame=src,input=src,form=fakeentry"

Is the new behaviour a feature or a bug?

Guenther

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2002-02-03 19:39 UTC] yohgaki@php.net 
Current code does not set SID when trans sid is off.

Is there any version that does initialize SID always?
 [2002-02-04 03:33 UTC] gblatz at blatzheim dot com 
In versions <4.1.x I did not compile with --enable-trans-sid, had session.use_trans_sid=1 and used <?=SID?>. The result was one session-id. After the upgrade to 4.1.x I
get each session-id twice. All compiler settings remained
the same. As I understand --enable-trans-sid is now the default.

But how to get the same behaviour as before and is the implicit disable of <?=SID?> by intention?

Further I'm not sure if the modification of the url_rewriter.tags is the right way to handle this?
 [2002-02-13 22:42 UTC] yohgaki@php.net 
Will be fixed soon
 [2002-03-05 18:31 UTC] yohgaki@php.net 
This bug has been fixed in CVS.
 [2002-04-03 10:00 UTC] yohgaki@php.net 
Now SID is defined when session id is not set by cookie.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Mon May 05 22:01:30 2025 UTC