There is small problem in Roxen's SAPI, which arises when duplicate headers are sent out. While playing with some PHP apps with Roxen, I found that regardless how many cookies are set in PHP code, only one is sent to the browser.

Investigation shows that Roxen's SAPI uses Pike's type "mapping" to send headers, which (of course) doesn't allow duplicate headers (in my case "Set-Cookie") to be sent, i.e. only last one is sent, since subsequesnt calls to set header with the same name will replace previous.

Proposed solution: use array instead of mapping. It will require changes in Roxen module as well, of course, but this should not be difficult.