[Bug 6360] Site visitors have their session UID changed at random points during heavy site traffic

[email protected]
Newsgroups gmane.comp.cms.xaraya.bugs
Message-ID <[email protected]>
http://bugs.xaraya.com/show_bug.cgi?id=6360





------- Comment #2 from [email protected]  2009-06-05 18:35 GMT -------
(In reply to comment #1)
> Same issue as in http://www.xaraya.com/index.php/newsgroups/xaraya.devel/13571
> ?

No.

In PHP 5.0.0, a new PHP configuration variable session.hash_bits_per_character
was introduced, which:

"allows you to define how many bits are stored in each character when
converting the binary hash data to something readable. The possible values are
'4' (0-9, a-f), '5' (0-9, a-v), and '6' (0-9, a-z, A-Z, "-", ",")."

The default value is 4.  The host of the site Chad mentioned had changed this
setting to 5, resulting in strange session id's which Xaraya did not expect.

Perhaps our session init should do a sanity check on hash_bits_per_character
under PHP5, and possibly on session.hash_function as well.  Both are settable
at PHP_INI_ALL.


-- 
Configure bugmail: http://bugs.xaraya.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

---- ** IMPORTANT ** READ BELOW ** ----
[Clip Me Start]
--------------------------------------------------------------------------
If you wish, you can reply to this message directly **however**, make sure
to use the "Reply To All" feature of your client **and** ensure that the 
bug specifier is in the subject (ie: [Bug ####]). Also, you _MUST_ have 
you're From or Reply-To address set to the same address you use to log
into your bugzilla account or your reply will not be attached to the bug.
--------------------------------------------------------------------------
[Clip Me End]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.