[RFC Discussion] Precise session management

> I haven't changed E_RECOVERABLE_ERROR to exception yet. > Anyone has opinion on this? If not, I'll convert the error to exception > and start vote.

>> >> RFC >> https://wiki.php.net/rfc/precise_session_management >> >> PR >> https://github.com/php/php-src/pull/1734 > > Thank you for the comment and review, Bob! > I've updated the patch. Please take a look at the PR. > > I haven't changed E_RECOVERABLE_ERROR to exception yet. > Anyone has opinion on this? If not, I'll convert the error to exception > and start vote.

> On Sun, Feb 14, 2016 at 9:49 AM, Yasuo Ohgaki <yohgaki@ohgaki.net> wrote: >> It's been long time since the first proposal. Since session >> module is important module for Web apps, I would like to >> hear opinions for this RFC once again before vote. >> >> RFC >> https://wiki.php.net/rfc/precise_session_management >> >> PR >> https://github.com/php/php-src/pull/1734 >> >> Thank you. > > Vote is over and the result is 15 in favor and 11 against. > It's over half of votes, but I set 2/3 to pass, so we have to come up > to other solution for current session management problems. > > I'm looking forward to hear alternatives from people vote against this RFC. > > Issues are > - Prevent race conditions. > - Prevent session data from abuse. (Stolen session including forever) > > These are allowed with current session module. > > Thank you!