Skip to content

[FrameworkBundle] Add sid_length and sid_bits_per_character session ini options in session configuration #30027

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Feb 8, 2019

Conversation

XuruDragon
Copy link

@XuruDragon XuruDragon commented Jan 29, 2019

Q A
Branch? master
Bug fix? no
New feature? yes
BC breaks? no
Deprecations? no
Tests pass? yes
Fixed tickets #29830
License MIT
Doc PR n/a

this a fix for the issue #29830

After deliberation, we estimate that only sid_length and sid_bits_per_character session options should be exposed. These options à optional.

For others, we recommend changing your php.ini file

We can now configure the session like this :

framwork:
  session:
    sid_length: 64 //optional, recommended value is 32
    sid_bits_per_character: 6 //optional, recommended value is 5

@derrabus
Copy link
Member

In #29830, @pravdinalex reported that the 3.4 branch lacks support for those options as well. Was this PR intentionally opened against the master branch?

@OskarStark
Copy link
Contributor

As this is a new "feature" it must be against master per definition, right?

@derrabus
Copy link
Member

As this is a new "feature"

Is it? The new feature has been implemented in php itself and the HTTP Foundation component already supports it. One could argue that this PR merely solves a configuration issue of the Framework Bundle.

I don't have a clear opinion on this. I've just noticed a contradiction between the linked issue and the PR and thought I should mention it. 😃

@XuruDragon
Copy link
Author

XuruDragon commented Jan 30, 2019

yes indeed, my first intention was to make it a bugfix for the 3.4 branch.

But as it can change the behavior of the application and can be set in the application, it sounds like a new feature. But I'm open to change it.

@XuruDragon XuruDragon changed the title [FrameworkBundle] Add sid_length and sid_bits_per_character session ini options in session configuration [WIP] [FrameworkBundle] Add sid_length and sid_bits_per_character session ini options in session configuration Jan 30, 2019
@XuruDragon XuruDragon changed the title [WIP] [FrameworkBundle] Add sid_length and sid_bits_per_character session ini options in session configuration [FrameworkBundle] Add sid_length and sid_bits_per_character session ini options in session configuration Jan 30, 2019
@XuruDragon XuruDragon force-pushed the issue-29830 branch 2 times, most recently from eb91f57 to 32ad132 Compare January 30, 2019 10:24
@nicolas-grekas
Copy link
Member

That's a new feature to me. Reports that ask for bug fixes but really ask for feature are not uncommon :)

@XuruDragon XuruDragon force-pushed the issue-29830 branch 2 times, most recently from dd20abf to 0ea374c Compare February 7, 2019 12:02
@nicolas-grekas
Copy link
Member

nicolas-grekas commented Feb 8, 2019

rebase needed

…ni options in configuration

| Q             | A
| ------------- | ---
| Branch?       | master
| Bug fix?      | no
| New feature?  | yes
| BC breaks?    | no
| Deprecations? | no
| Tests pass?   | yes
| Fixed tickets | symfony#29830
| License       | MIT
| Doc PR        | n/a

this a fix for the issue symfony#29830

After deliberation, we estimate that only `sid_length` and` sid_bits_per_character` session options should be exposed. These options à optional.

For others, we recommend changing your php.ini file

We can now configure the session like this :

```yaml
framwork:
  session:
    sid_length: 64 //optional, recommended value is 32
    sid_bits_per_character: 6 //optional, recommended value is 5
```
@XuruDragon
Copy link
Author

rebase needed

done

@nicolas-grekas
Copy link
Member

Thank you @XuruDragon.

@nicolas-grekas nicolas-grekas merged commit 0403e4a into symfony:master Feb 8, 2019
nicolas-grekas added a commit that referenced this pull request Feb 8, 2019
…acter session ini options in session configuration (XuruDragon)

This PR was merged into the 4.3-dev branch.

Discussion
----------

[FrameworkBundle] Add sid_length and sid_bits_per_character session ini options in session configuration

| Q             | A
| ------------- | ---
| Branch?       | master
| Bug fix?      | no
| New feature?  | yes
| BC breaks?    | no
| Deprecations? | no
| Tests pass?   | yes
| Fixed tickets | #29830
| License       | MIT
| Doc PR        | n/a

this a fix for the issue #29830

After deliberation, we estimate that only `sid_length` and` sid_bits_per_character` session options should be exposed. These options à optional.

For others, we recommend changing your php.ini file

We can now configure the session like this :

```yaml
framwork:
  session:
    sid_length: 64 //optional, recommended value is 32
    sid_bits_per_character: 6 //optional, recommended value is 5
```

Commits
-------

0403e4a [FrameworkBundle] Add sid_length and sid_bits_per_character session ini options in configuration
@XuruDragon XuruDragon deleted the issue-29830 branch February 8, 2019 12:31
javiereguiluz added a commit to symfony/symfony-docs that referenced this pull request Feb 11, 2019
This PR was merged into the master branch.

Discussion
----------

Update the documentation for the PR #30027

See symfony/symfony#30027

Added `sid_length` and `sid_vits_per_character` options

Commits
-------

8e44f8e Update the documentation for the PR #30027
@nicolas-grekas nicolas-grekas modified the milestones: next, 4.3 Apr 30, 2019
@fabpot fabpot mentioned this pull request May 9, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

7 participants