Re: Session Support in aserve

Brendan Burns <[email protected]> Fri, 19 Jul 2002 08:53:10 -0400
Newsgroups gmane.lisp.open-source.franz
Message-ID <B95D83F6.2A8C%[email protected]>
> hey,
> 
> the session ID generation (string (gensym)) isn't nice, because the
> session ids are predictable.
> besides gensym creates a new symbol, and symbols aren't garbage
> collected i think.  so it's a kind of a memory leak?

Hmm, yes that's a good point.  It would allow for pretty easy
session-jacking...  I'll fix that.  In the meantime don't use the patch for
any web-banking apps ;-P

--brendan