Welcome! Log In Create A New Profile

Advanced

[PHP-DEV] Check session availability before starting session.

Posted by Yasuo Ohgaki 
Yasuo Ohgaki
[PHP-DEV] Check session availability before starting session.
September 02, 2018 01:10PM
Hi all,

I've got request for session_available() which can check if session
ID is sent from client or not _before_ starting session.
(The session data existence does not matter)

This is for GDPR primarily. Starting session before agreement can be
GDPR compliance violation.

Since PHP supports various way to embed session ID in page / request,
finding actual state by user script is not a simple task. i.e. Just checking
session ID cookie is not good enough by session module spec. Session ID
can be stored in URL path, query, POST parameter and cookie.

Any comments?

--
Yasuo Ohgaki
yohgaki@ohgaki.net
Sorry, only registered users may post in this forum.

Click here to login