Patches item #561704, was opened at 2002-05-28 21:50
You can respond by visiting:
http://sourceforge.net/tracker/?func=detail&atid=403613&aid=561704&group_id=31885
Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Giancarlo Pinerolo (pingus)
Assigned to: Nobody/Anonymous (nobody)
Summary: $newid to $sess->newid in session.inc
Initial Comment:
I applied this patch, making the newid variable a class
variable.
The $newid variable is used in the get_id helper method
of session->start, at generation/not of a new id.
I need this to be a class variable, so I can test when
we've just delivered a new session.
I can block some actions, eg registering , when they
demanded at the same time as a new session.
In practice it serves as a status flag, can be used to
oblige to have acquired a session in a tour before for
certain operations.
Useful for security, prevents certain submissions with
a single http post.
----------------------------------------------------------------------
You can respond by visiting:
http://sourceforge.net/tracker/?func=detail&atid=403613&aid=561704&group_id=31885
|