Re: [Cgi-session-user] Re: Security issue about CGI::Session

[Mark S. <ma...@su...>]

On Thu, Mar 23, 2006 at 03:38:26PM -0600, Matt LeBlanc wrote:
> My current opinion on the matter is that we do away with a default 
> location for the sqlite database file. Neither the mysql nor postgresql 
> drivers have this behavior and providing a default location just 
> encourages an unsafe practice.

That works for me. The Sqlite driver is new, and I doubt this will
affect many people at all. 

I think a clear message about the behavior change in the 'Changes' file
is sufficient, along with making sure the POD is updated as well.

	Mark