[Phplib-users] session.inc header bug

[Huib K. <hu...@st...>]

Hi,
To anyone having cvs access:
There are some easy to fix bugs in session.inc

When the same kind of header is send more than once (for example
'Cache-control') The second argument of the php function: 
int header (string string [, bool replace]) 
should be used (it should be 'false'). 

for example:
 default:
        header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
        header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT");
        header("Cache-Control: no-cache");
        header("Cache-Control: post-check=0, pre-check=0");
        header("Pragma: no-cache");

should be replaced with:
 default:
        header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
        header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT");
        header("Cache-Control: no-cache");
        header("Cache-Control: post-check=0, pre-check=0", false);
        header("Pragma: no-cache");

At this moment only the header "Cache-Control: post-check=0,
pre-check=0" is send. This header is IE-only (violates rfc2616 and even
doesn't work on most versions of IE because of the 125362 bugs in the IE
caching system)

thanks!
Huib