php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Bug #15322 php.ini : session.use_trans_sid=0 disables <?=SID?> session-id creation too
Submitted: 2002-02-01 08:20 UTC Modified: 2002-04-03 10:00 UTC
From: gblatz at blatzheim dot com Assigned:
Status: Closed Package: Session related
PHP Version: 4.1.1 OS: SuSe 7.3
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: gblatz at blatzheim dot com
New email:
PHP Version: OS:

 

 [2002-02-01 08:20 UTC] gblatz at blatzheim dot com 
Before 4.1.x I didn't compile with --enable-trans-sid and used instead the <?=SID?> expression
on pages very often.

With the new releases and --enable-trans-sid as default I now get the session-id twice on every link 
which is the expected behaviour on first hand. I didn't want to edit all pages.

My idea was to set "session.use_trans_sid=0" in php.ini to disable the auto-session generation.

After this, even <?=SID?> does no longer generate a session-id, which seems to be a bug!?

The only quick hack for the moment was to have "session.use_trans_sid=1" and to modify
the url_rewriter.tags in php.ini:

Original: url_rewriter.tags = "a=href,area=href,frame=src,input=src,form=fakeentry"

Modified: url_rewriter.tags = "area=href,frame=src,input=src,form=fakeentry"

Is the new behaviour a feature or a bug?

Guenther

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2002-02-03 19:39 UTC] yohgaki@php.net 
Current code does not set SID when trans sid is off.

Is there any version that does initialize SID always?
 [2002-02-04 03:33 UTC] gblatz at blatzheim dot com 
In versions <4.1.x I did not compile with --enable-trans-sid, had session.use_trans_sid=1 and used <?=SID?>. The result was one session-id. After the upgrade to 4.1.x I
get each session-id twice. All compiler settings remained
the same. As I understand --enable-trans-sid is now the default.

But how to get the same behaviour as before and is the implicit disable of <?=SID?> by intention?

Further I'm not sure if the modification of the url_rewriter.tags is the right way to handle this?
 [2002-02-13 22:42 UTC] yohgaki@php.net 
Will be fixed soon
 [2002-03-05 18:31 UTC] yohgaki@php.net 
This bug has been fixed in CVS.
 [2002-04-03 10:00 UTC] yohgaki@php.net 
Now SID is defined when session id is not set by cookie.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Wed May 07 09:01:27 2025 UTC