php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #8179 session.referer_check malfunctions
Submitted: 2000-12-08 16:26 UTC Modified: 2000-12-15 10:17 UTC
From: snubber at seahat dot com Assigned:
Status: Closed Package: Session related
PHP Version: 4.0.3pl1 OS: Debian 2.2
Private report: No CVE-ID: None
View Add Comment Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
You can add a comment by following this link or if you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: snubber at seahat dot com
New email:
PHP Version: OS:

 

 [2000-12-08 16:26 UTC] snubber at seahat dot com
the session.referer_check option in the php.ini file seems to cause php to restart the session on every page of the same site when enabled.  

If you turn on the referer check, and enable 'warn me before accepting cookies' in netscape you will see PHP setting a cookie for a new session every time session_start() is called.

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2000-12-15 10:17 UTC] sniper@php.net
From http://www.php.net/manual/reg.session.php:
---------------------------------------------------------
 session.referer_check contains the substring you want to
 check each HTTP Referer for. If the Referer was sent by
 the client and the substring was not found, the embedded
 session id will be marked as invalid. Defaults to the
 empty string
---------------------------------------------------------

--Jani
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Sat May 18 21:01:33 2024 UTC