- add note why replace is 0, so that I don't wonder again in 2 months

  why session_regenerate_id() sends the session cookie twice

1 files changed, 2 insertions, 0 deletions

diff --git a/ext/session/session.c b/ext/session/session.c
index 1572a9c49d..80e9525331 100644
--- a/ext/session/session.c
+++ b/ext/session/session.c
@@ -942,6 +942,8 @@ static void php_session_send_cookie(TSRMLS_D)
 
 	smart_str_0(&ncookie);
 	
+	/*	'replace' must be 0 here, else a previous Set-Cookie
+		header, probably sent with setcookie() will be replaced! */
 	sapi_add_header_ex(ncookie.c, ncookie.len, 0, 0 TSRMLS_CC);
 }