URL-Rewriter should not get enabled if use_only_cookies is set to 1

Bug #51338 URL-Rewriter should not get enabled if use_only_cookies is set to 1
Submitted: 2010-03-20 16:43 UTC Modified: 2010-03-22 13:18 UTC
From: j dot jeising at gmail dot com Assigned: iliaa (profile)
Status: Closed Package: Session related
PHP Version: 5.3SVN-2010-03-20 (SVN) OS:
Private report: No CVE-ID: None

 [2010-03-20 16:43 UTC] j dot jeising at gmail dot com

Description:
------------
If session.use_only_cookies is enabled and session_use_trans_sid is enabled PHP 
sets the URL-Rewriter as an ouput handler, although there is nothing to rewrite.

The Problem is the apply_trans_sid variable in session.c, which is only set to 
zero if a cookie is found. I wrote a small patch which should fix it but somebody 
with more insight should have a look.

Test script:
---------------
<?php

ini_set('session.use_only_cookies', 1);
ini_set('session.use_trans_sid', 0);

session_start();

print_r(ob_list_handlers());
	
?>

Expected result:
----------------
Array
(
    [0] => default output handler
)


Actual result:
--------------
Array
(
    [0] => URL-Rewriter
)

Patches

apply_trans_sid.patch (last revision 2010-03-20 15:43 UTC by j dot jeising at gmail dot com)

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports

 [2010-03-20 16:45 UTC] j dot jeising at gmail dot com

Should be "ini_set('session.use_trans_sid', 1);" in the test script.

 [2010-03-22 13:18 UTC] iliaa@php.net

-Status: Open +Status: Closed -Assigned To: +Assigned To: iliaa