Re: [Phplib-users] Proposed changes to session

[Giancarlo <gia...@na...>]

Rob Hutton wrote:
> 1) allow_auto_mode_change = boolean :  If set to True, this allows the mode
> to change based on the method that the session ID was submitted.  The order
> of checking would be cookie, get, post.  If set to false, the session would
> return an error if the method did not match the previous mode or multiple
> modes were set.  Either setting would return an error if the method was not
> in the supported_modes array.
> 
> 2) sess( supported_modes = array()) :  supported_modes specifies the list of
> modes supported by this session type.  This would replace the mode and
> fallback_mode variables.
> 
> 3) sess->transform(session_class = class) :  Transform the current session
> variable into type session_class.  This would allow the session variables to
> be moved to type session_class in case you need one class to handle "public"
> areas and one to handle "private" areas for example with more securty.
> 


Sound. I agree on all these. In practice, as I noted in default_auth, we 
are moving characteristics from the page to the user. Things like that 
session_timeout is better determibed on a per user base rather than 
per-page. The same with session now. This recognise that it really 
depends on who you are, doing what, when. Great!

Gian