Martin Jansen c5f9a231d5 Streamlining of cookie handling in ext/session and setcookie ... Up until now the session cookie used "HttpOnly" to indicate cookies only available through HTTP while setcookie() used "httponly". The relevant RFC 6265 claims that case does not matter for this token, but only explicitely mentions "HttpOnly". Thus this seems like a logical choice when streamlining the code. Also the setcookie implementation now uses the same string constants as the session extension for other tokens like Max-Age or the domain attribute. This change poses a slight risk of backwards incompatibility in places where people deliberately ignore chapter 5.2.5 of RFC 6265 and perform case-sensitive checks for the HttpOnly attribute.		2014-05-06 22:00:59 +02:00
..
tests	This test requires the hash extension.	2014-05-06 21:34:10 +02:00
config.m4	Implement object-oriented session handlers (https://wiki.php.net/rfc/session-oo)	2011-09-13 22:28:15 +00:00
config.w32	Implement object-oriented session handlers (https://wiki.php.net/rfc/session-oo)	2011-09-13 22:28:15 +00:00
CREDITS
mod_files.bat	MFH	2008-12-30 19:37:35 +00:00
mod_files.c	Merge branch 'PHP-5.4' into PHP-5.5	2014-04-14 23:30:14 +02:00
mod_files.h	Bump year	2014-01-03 11:08:10 +08:00
mod_files.sh	Fixed bug #49175: mod_files.sh does not support hash bits	2013-06-29 11:35:55 +09:00
mod_mm.c	Fixed session module is sending multiple set-cookie headers when session.use_strict_mode=1	2014-01-15 11:06:06 +09:00
mod_mm.h	Bump year	2014-01-03 11:08:10 +08:00
mod_user_class.c	Bump year	2014-01-03 11:08:10 +08:00
mod_user.c	Bump year	2014-01-03 11:08:10 +08:00
mod_user.h	Bump year	2014-01-03 11:08:10 +08:00
package.xml	Implement object-oriented session handlers (https://wiki.php.net/rfc/session-oo)	2011-09-13 22:28:15 +00:00
php_session.h	Bump year	2014-01-03 11:08:10 +08:00
session.c	Streamlining of cookie handling in ext/session and setcookie	2014-05-06 22:00:59 +02:00