Description:
------------
I found a strange (to me at least) behaviour with sessions when using HTTPS.

Let's say that $_SESSION["message"] contains "old_message". Take the following code:

$old_message = $_SESSION["message"];
$_SESSION["message"] = "new message";
echo "The message was: ".$old_message;

Now, over HTTP you would get the expected output ("old_message"). But over HTTPS the output will contain "new_message".

You can use session_unregister("message") if you want $old_message to preserve its value, but this means you can't set anymore a new value for $_SESSION["message"].