diff options
| author | Antony Dovgal <tony2001@php.net> | 2005-05-20 10:28:35 +0000 |
|---|---|---|
| committer | Antony Dovgal <tony2001@php.net> | 2005-05-20 10:28:35 +0000 |
| commit | e5f04e5d2f953cc2b9280bca1f86739e5d236496 (patch) | |
| tree | cdd615eb2f77d267191a0a4e3d89634e69634fab | |
| parent | 30d06007691e625c856f2b57b73f334cbb166375 (diff) | |
| download | php-git-e5f04e5d2f953cc2b9280bca1f86739e5d236496.tar.gz | |
MFH: fix bug #32944 (Disabling session.use_cookies doesn't prevent reading session cookies)
| -rw-r--r-- | NEWS | 2 | ||||
| -rw-r--r-- | ext/session/session.c | 2 |
2 files changed, 3 insertions, 1 deletions
@@ -12,6 +12,8 @@ PHP 4 NEWS - Fixed bug #33019 (socket errors cause memory leaks in php_strerror()). (jwozniak23 at poczta dot onet dot pl, Tony). - Fixed bug #32974 (pcntl calls malloc() from a signal handler). (Wez) +- Fixed bug #32944 (Disabling session.use_cookies doesn't prevent reading + session cookies). (Jani, Tony) - Fixed bug #32936 (http redirects URLs are not checked for control chars). (Ilia) - Fixed bug #32932 (Oracle LDAP: ldap_get_entries invalid pointer). (Jani) - Fixed bug #32904 (pg_get_notify() ignores result_type parameter). (Tony) diff --git a/ext/session/session.c b/ext/session/session.c index 816f03f040..9904e7a9e7 100644 --- a/ext/session/session.c +++ b/ext/session/session.c @@ -1015,7 +1015,7 @@ PHPAPI void php_session_start(TSRMLS_D) */ if (!PS(id)) { - if (zend_hash_find(&EG(symbol_table), "_COOKIE", + if (PS(use_cookies) && zend_hash_find(&EG(symbol_table), "_COOKIE", sizeof("_COOKIE"), (void **) &data) == SUCCESS && Z_TYPE_PP(data) == IS_ARRAY && zend_hash_find(Z_ARRVAL_PP(data), PS(session_name), |