mcdruid
|
7ba88d9d4f
|
Issue #3170525 by mcdruid, nullkernel, simonholt83, MustangGB, Znak, axle_foley00, Fabianx, akorkot, cilefen, thalemn, Ayesh, ressa, finne: Set samesite cookie attribute for PHP sessions
|
2021-03-23 21:33:42 +00:00 |
|
mcdruid
|
44fecf2115
|
Issue #3025335 by mcdruid, mfb, joseph.olstad, Fabianx, kiamlaluno, Pol: [PHP 7.3] Cannot change session id when session is active
|
2019-11-06 21:39:06 +00:00 |
stefan.r
|
d2d2c5f3b4
|
Issue #2761285 by MegaChriz: _drupal_session_write() does not always return a boolean
|
2016-07-06 17:25:45 +02:00 |
David Rothstein
|
84723952f2
|
Issue #2460833 by jackbravo, colinmccabe, checker, Alan D., twistor: _drupal_session_destroy() should return boolean
|
2016-06-27 16:02:39 -04:00 |
|
David Rothstein
|
81586d9e9d
|
Drupal 7.34
|
2014-11-19 15:24:29 -05:00 |
|
David Rothstein
|
782d1155c6
|
Drupal 7.24
|
2013-11-20 15:45:59 -05:00 |
Jennifer Hodgdon
|
a03edeb357
|
Issue #1317628 by Albert Volkman, Gaelan, disasm, mjonesdinero, xjm: Clean up API docs for include files n-z
|
2013-01-16 10:01:31 -08:00 |
webchick
|
1830054811
|
Issue #1688036 by lucascaro, sun: Fixed Session regenerate and destroy functions do not adhere to drupal_save_session().
|
2012-08-18 14:10:10 +02:00 |
|
webchick
|
51d0867d84
|
Issue #1050746 by grendzy, xjm, Everett Zufelt: Fixed HTTPS sessions not working in all cases.
|
2012-03-23 01:00:20 -06:00 |
|
webchick
|
7360bb95db
|
Issue #825972 by daniels220, Reidsy, jhodgdon: Fixed sess_write()/sess_read() documentation should recommend instead.
|
2011-09-30 14:21:48 -07:00 |
The Great Git Migration
|
79bcdb8b7d
|
Stripping CVS keywords
|
2011-02-25 02:06:03 +00:00 |
Dries Buytaert
|
9c44a60045
|
- Rollback of accidentical commit #1064882.
|
2011-02-19 16:59:43 +00:00 |
|
Dries Buytaert
|
3e914018de
|
- Patch #880278 by RoboPhred: cleanup _locale_import_read_po().
|
2011-02-19 13:24:32 +00:00 |
|
Angie Byron
|
a3fab0edad
|
#575280 follow-up by mfb, carlos8f: Empty session IDs break Drupal. (courtesty of BADCamp 2010 woo)
|
2010-11-13 17:40:09 +00:00 |
|
Dries Buytaert
|
e920fe34ef
|
- Patch #575280 by mfb, carlos8f, chx, bleen18: impersonation when an https session exists.
|
2010-11-05 19:05:02 +00:00 |
|
Angie Byron
|
4a9cd0fcc1
|
#744384 by c960657: Do not write unchanged sessions to the database.
|
2010-10-15 04:15:41 +00:00 |
|
Dries Buytaert
|
743646d373
|
- Patch #846330 by sun: proper wrapping of phpDoc.
|
2010-09-17 14:56:27 +00:00 |
|
Dries Buytaert
|
1a0778d1f6
|
- Patch #855394 by aspilicious: fix newlines in session.inc.
|
2010-07-16 02:53:02 +00:00 |
|
Dries Buytaert
|
5a904b80c1
|
- Patch #846330 by JacobSingh, Gábor Hojtsy: impossible to log in with default PHP settings due to cookie lifetime.
|
2010-07-07 13:52:00 +00:00 |
|
Dries Buytaert
|
8ef7c6fb8d
|
- Patch #801278 by mfb, marcingy: authenticated users getting 'less random' session IDs.
|
2010-06-27 20:55:14 +00:00 |
|
Dries Buytaert
|
1cd8bc5a00
|
- Patch #813492 by chx, Damien Tournoud, justinrandell: HTTPS sessions use an invalid merge query.
|
2010-06-14 12:31:46 +00:00 |
|
Dries Buytaert
|
8fb6adbc21
|
- Patch #742246 by jbrown, noahb, aspilicious, alexanderpas, rfay:handle uncaught exceptions.
|
2010-06-05 13:30:42 +00:00 |
|
Dries Buytaert
|
71713081a2
|
- Patch #723802 by pwolanin, grendzy: convert to sha-256 and hmac from md5 and sha1.
|
2010-05-01 08:12:23 +00:00 |
|
Dries Buytaert
|
06fe6cae2d
|
- Patch #763048 by catch: critical bug: remove drupal_unpack()() due to namespacing collisions.
|
2010-04-13 15:13:41 +00:00 |
|
Dries Buytaert
|
ff301288f2
|
- Patch #348448 by mfb, c960657, marvil07, cdale, jpmckinney: fixed PHP strict warnings when running tests and for PHP 5.3.
|
2010-04-11 18:33:44 +00:00 |
|
Dries Buytaert
|
bead28a4cd
|
- Patch #721436 by catch, chx, sun, eojthebrave, David_Rothstein, moshe weitzman: remove magical fairy saving of cruft from user_save().
|
2010-04-07 13:49:21 +00:00 |
|
Dries Buytaert
|
d2f6d6a0c3
|
- Patch #578212 by marcvangend, scor: fixed SA-CORE-2010-001, blocked user session regeneration.
|
2010-03-09 03:52:02 +00:00 |
|
Angie Byron
|
8d01aeb428
|
#710142 by Berdir, moshe weitzman, chx: Handle exceptions in shutdown functions (with tests). Hopefully the last of these weird 'Stack frame in Unknown line 0' errors.
|
2010-02-17 22:44:52 +00:00 |
|
Dries Buytaert
|
af3f94b37e
|
- Patch #693614 by asimmonds: fixed PHPDoc spelling typos.
|
2010-01-25 10:38:35 +00:00 |
|
Angie Byron
|
1c2cda2d7c
|
#681134 by moshe weitzman: Fixed stop issuing headers to CLI clients.
|
2010-01-14 02:05:34 +00:00 |
|
Dries Buytaert
|
949ccddb91
|
- Patch #666024 by boombatower, mcrittenden: code and documentation clean-ups.
|
2009-12-30 08:16:55 +00:00 |
|
Dries Buytaert
|
00f122cd7b
|
- Patch #655212 by chx: remove unused and broken drupal_session_count().
|
2009-12-12 20:55:18 +00:00 |
|
Angie Byron
|
36adc757f9
|
#575280 follow-up by mfb and chx: Fixed impersonation attack when an https session exists.
|
2009-11-04 05:05:52 +00:00 |
|
Dries Buytaert
|
67f2c101c1
|
- Patch #584966 by mr.baileys, sun: add doxygen group for PHP function wrappers in Drupal.
|
2009-09-28 22:22:54 +00:00 |
|
Dries Buytaert
|
6586b76465
|
- Patch by #1577 by chx, boombatower, Bèr Kessels, kkaefer: made SSL support a bit easier by providing two cookies and ... hook_goto_alter.
|
2009-09-05 13:05:31 +00:00 |
|
Dries Buytaert
|
5962cc5ab2
|
- Patch #477944 by DamZ: more streamlining and clean-up of session handling code.
|
2009-07-01 12:47:30 +00:00 |
|
Dries Buytaert
|
e474fbbd6c
|
- Patch #477944 by Damien Tournoud: fix and streamline page cache and session handling.
|
2009-06-02 06:58:17 +00:00 |
|
Dries Buytaert
|
ce4df7b66b
|
- Patch #422374 by JamesAn: convert to use the new static caching API.
|
2009-04-03 17:41:32 +00:00 |
|
Angie Byron
|
665c9fdc2c
|
Roll-back of users -> user table name change in #330983: Broken pgsql is no fun.
|
2009-02-26 07:30:29 +00:00 |
|
Angie Byron
|
ff9e842730
|
#330983 by recidive and boombatower: Rename users/users_roles tables to user/user_role for consistency.
|
2009-02-18 15:19:57 +00:00 |
|
Dries Buytaert
|
d20e457121
|
- Patch #201122 by c960657, Moshe Weitzman: never write anonymous sessions, unless something has been written to . This is an important performance improvements -- as long as you use modules that use carefully. It might be good to report some analytics about this in the performance settings page so administrators can see if there is a 'broken' module.
|
2009-01-19 10:46:52 +00:00 |
|
Dries Buytaert
|
96dc47665e
|
- Patch #280934 by pwolanin, swentel, et al: harden session regeneration. It took a while, but it comes with tests and extra features now.
|
2008-11-24 06:12:46 +00:00 |
|
Dries Buytaert
|
bd108c7f10
|
- Patch #299778 by hswong3i, Arancaytar, Dave Reid et al: code clean-up.
|
2008-11-11 16:49:38 +00:00 |
|
Dries Buytaert
|
c2a4b9c19f
|
- Patch #297860 by Damien Tournoud: converted session.inc to the new database abstraction layer.
|
2008-11-01 21:27:38 +00:00 |
|
Angie Byron
|
cede322c1b
|
#293612 by egfrith: user_authenticate() should work when is empty.
|
2008-10-11 16:37:38 +00:00 |
|
Dries Buytaert
|
9f3d9f1115
|
- Patch #161301 by Eaton, Sun, moshe and webchick: make checking for node edit forms easier. DX improvement.
|
2008-09-27 20:37:01 +00:00 |
|
Dries Buytaert
|
8fc581d4d7
|
- Patch #309488 by kbahey: correct capitalization of TRUE and FALSE.
|
2008-09-19 07:53:59 +00:00 |
|
Dries Buytaert
|
7f29b14277
|
- Patch #305645 by pwolanin: ['REQUEST_TIME'] -> REQUEST_TIME. Improved developer experience.
|
2008-09-17 07:11:59 +00:00 |
|
Angie Byron
|
161a9970f7
|
#308534 by Dave Reid: Remove stray whitespace core-wide.
|
2008-09-15 20:48:10 +00:00 |
|
Dries Buytaert
|
312b97e9e9
|
- Patch #253702 by Damien Tournoud et al: further clean-up of the session handling code.
|
2008-09-15 15:18:59 +00:00 |