Re: Session Support in aserve
Brendan Burns <[email protected]> Fri, 19 Jul 2002 08:53:10 -0400
| Newsgroups | gmane.lisp.open-source.franz |
|---|---|
| Message-ID | <B95D83F6.2A8C%[email protected]> |
> hey, > > the session ID generation (string (gensym)) isn't nice, because the > session ids are predictable. > besides gensym creates a new symbol, and symbols aren't garbage > collected i think. so it's a kind of a memory leak? Hmm, yes that's a good point. It would allow for pretty easy session-jacking... I'll fix that. In the meantime don't use the patch for any web-banking apps ;-P --brendan