That's nice. Could you now explain why you need these symbols in session
IDs?
Stefan Esser wrote:
sesser Sat Jun 16 07:47:46 2007 UTC
Modified files:
/php-src/ext/session session.c
Log:
Fix attribute injection security bug correctly by URL encoding session
Stanislav Malyshev schrieb:
> That's nice. Could you now explain why you need these symbols in
> session IDs?
>
Even Zend Platform used ':' in session IDs not long ago. Maybe recent
versions of Zend Platform don't, but that is not the point.
The point is YOU DON'T KNOW how many people use one of t
Yeah, this should be fixed. I'll try to do it over the weekend.
-Andrei
On Jun 15, 2007, at 3:25 AM, Robert Lemke wrote:
Hi folks,
I am currently developing the next major version of TYPO3, a PHP
based content management system. As we take advantage of the new
Unicode features (among oth
