Commit Graph

713 Commits

Author SHA1 Message Date
Felipe Pena
474bcc8cc1 - MFB: Added arginfo 2008-06-27 16:37:03 +00:00
Steph Fox
4be7f4aecd - killed off UEXPECT
- com_dotnet gets a .cvsignore
- Ulf will take care of mysql extensions, rest complete
2008-05-27 18:16:04 +00:00
Felipe Pena
52c0057c63 - Removed UEXPECT(F) 2008-05-27 12:17:40 +00:00
Antony Dovgal
76d9064cc7 use ZEND_U_CONVERTER() macro to prevent segfaults when the converter is not set (i.e. NULL) 2008-05-21 12:01:55 +00:00
Ant Phillips
b3e6072a04 Fix session test failures as reported by Antony Dovgal.
These were caused by the tests assuming default values for some session
configuration settings, in particular session.save_path and session.name.
The tests now explicitly set these settings in the --INI-- section.
2008-04-30 15:20:17 +00:00
Ant Phillips
3edf8bd266 Fix session test failures as reported by Antony Dovgal.
These were caused by the tests assuming default values for some session
configuration settings, in particular session.save_path and session.name.
The tests now explicitly set these settings in the --INI-- section.
2008-04-30 09:28:00 +00:00
Ant Phillips
6b00f44934 More session tests to improve code coverage for untested extension code 2008-04-29 09:24:18 +00:00
Ant Phillips
049e27a949 More session tests to improve code coverage for untested extension code 2008-04-29 08:57:10 +00:00
Ant Phillips
168e58d2da New set of session extension tests for PHP 6.0 branch.
These hopefully test a reasonable set of basic, error and variations for
the twenty or so session functions. Note however that they do not
test all the session configuration settings.
2008-04-22 16:05:42 +00:00
Scott MacVicar
8b5866866c Fixed bug #44719 (More uninitialised values causing wierd errors) 2008-04-15 00:39:43 +00:00
Scott MacVicar
43a40e7486 Fixed bug #44722 (Segfault setting a null session path) 2008-04-15 00:32:51 +00:00
Dmitry Stogov
b2638b8297 Fixed memory corruption because of double free() 2008-03-11 09:36:51 +00:00
Felipe Pena
7235c8e5bb Fix test 2008-03-08 23:32:22 +00:00
Gwynne Raskind
3ccb44a951 Fix bug #32330 (session_destroy, "Failed to initialize storage module", custom session handler) 2008-03-07 23:20:15 +00:00
Felipe Pena
a1e8d340c3 New macro for check void parameters 2008-02-28 14:16:25 +00:00
Sebastian Bergmann
9b620d50b4 Bump copyright year, 2 of 2. 2007-12-31 07:12:20 +00:00
Yiduo (David) Wang
95da0dc570 Added macros for managing zval refcounts and is_ref statuses 2007-10-07 05:15:07 +00:00
Dmitry Stogov
8146078f7b Improved memory usage by movig constants to read only memory. (Dmitry, Pierre) 2007-09-27 18:28:44 +00:00
Ilia Alshanetsky
3a802820e8 MFB: Fixed Bug #42596 (session.save_path MODE option does not work). 2007-09-10 23:43:08 +00:00
Jani Taskinen
24c98f8aa3 MFB: Fixed bug #37273 (Symlinks and mod_files session handler allow open_basedir bypass) 2007-08-23 13:38:49 +00:00
Jani Taskinen
197b51e796 MFB: -r1.100.2.3.2.5 2007-08-23 13:09:27 +00:00
Jani Taskinen
af83e1cad2 missing ) 2007-08-23 11:38:56 +00:00
Jani Taskinen
5735862a92 MFB (since Ilia is too lazy..): Fix bug #42135 2007-08-05 13:10:32 +00:00
Stanislav Malyshev
d4cc7daba2 MF5: fix for access control with .htaccess 2007-08-03 01:40:05 +00:00
Stanislav Malyshev
5d0a261394 always check save_path (issue reported by Maksymilian Arciemowicz) 2007-07-10 17:52:32 +00:00
Ilia Alshanetsky
eb72fc8968 MFB: Fixed compiler warning 2007-06-17 14:26:16 +00:00
Stefan Esser
fde56bd858 Fix attribute injection security bug correctly by URL encoding session
name and session value. (in future maybe encode path/domain, too)

Remove backward compatibility breaking blacklist of characters.
2007-06-16 07:47:46 +00:00
Stanislav Malyshev
e4e1f60125 MF5: Disallow characters that Cookie RFC does not allow in unquoted cookies 2007-06-15 22:42:43 +00:00
Antony Dovgal
976a22df16 php_gmtime_r() fixes 2007-06-07 08:58:38 +00:00
Ilia Alshanetsky
886cb0c783 MFB: Fixed bug #41600 (url rewriter tags doesn't work with namespaced tags). 2007-06-06 00:01:13 +00:00
Stanislav Malyshev
a66fbe2d5e do not send cookie when session is passed in URL, same as it happens with GET/POST 2007-05-16 01:32:28 +00:00
Antony Dovgal
8d9be0338b fix test names 2007-05-07 16:50:40 +00:00
Antony Dovgal
a8fe87efd3 fix build when ext/hash is compiled as shared module 2007-05-02 10:30:24 +00:00
Antony Dovgal
2c72351711 fix #40998 (long session array keys are truncated) 2007-04-04 19:46:42 +00:00
Antony Dovgal
03a3291262 MFB 2007-03-19 08:24:17 +00:00
Martin Kraemer
e46b1b3747 Typo 2007-03-14 09:49:58 +00:00
Marcus Boerger
20a40063c5 - avoid sprintf 2007-02-24 16:25:58 +00:00
Hannes Magnusson
71a68db63e MFB: fix skipif 2007-01-06 16:57:42 +00:00
Sara Golemon
851a151712 Don't bother with conversion when the converter is already UTF8 2007-01-05 17:29:30 +00:00
Sebastian Bergmann
4e8661438d Fix ZTS issues. 2007-01-05 14:53:30 +00:00
Sara Golemon
5d988bb1aa Allow ext/session to use ext/hash's algorithms for generating IDs 2007-01-05 03:57:57 +00:00
Sara Golemon
344cda1666 Unicode Updates 2007-01-05 02:07:59 +00:00
Ilia Alshanetsky
b21b4c01c3 MFB: Added missing open_basedir checks 2007-01-04 23:50:19 +00:00
Sara Golemon
21bac192e9 Cleanup ext/session so that I can do a unicode update without going insane. 2007-01-04 22:04:38 +00:00
Sebastian Bergmann
3717df72ae Bump year. 2007-01-01 09:29:37 +00:00
Ilia Alshanetsky
15f1692572 MFB: Added boundary checks to php_binary deserializer 2006-12-31 22:26:06 +00:00
Antony Dovgal
9e41e0fda3 fix tests 2006-12-27 19:22:29 +00:00
Ilia Alshanetsky
4386719b07 MFB: Session deserializer protection. 2006-12-26 17:18:28 +00:00
Antony Dovgal
abac61eec7 remove register_globals remains
maintain an internal reference of _SESSION, so that it won't be possible to destroy it from userspace
2006-12-20 19:20:59 +00:00
Antony Dovgal
576797c7c1 fix retval type
it should be int, not zend_bool
2006-12-04 15:58:35 +00:00