Releases: stefangabos/Zebra_Session
Releases · stefangabos/Zebra_Session
4.1.0
- fixed #49 where the old
session_set_save_handler
signature with more than 2 arguments was deprecated in PHP 8 and the deprecated signature would become unsupported either in PHP 9.0 or 10.0; the library is still backwards compatible; thanks to Joe Bordes for the heads up! - the
lock_to_ip
argument of the constructor can now also be a callable; see #56; this is a better and more secure fix for #43 and #54; this is also a fix for a very old #7! thanks Andreas Heissenberger for the great idea and the feedback added a fix for using the library with an AWS load balancer; see #43 and #54; thank you Dvelopin!- fixed (hopefully) #53 regarding table locks not being released if script execution ended before the library being able to write session data and release the lock
- fixed an issue where
get_settings()
would trigger an error ifsession.gc_divisor
is set to0
; this fixes #48 - thanks to Alex!
4.0.0
- the library doesn't set
session.cookie_lifetime
to0
anymore but to the number of seconds specified in the constructor; with this, finally, sessions can be kept alive even if the browser is closed - this fixes #40 and #5 - the library is not setting
gc_probability
andgc_divisor
properties anymore - this can potentially break your code when updating, as there are now less arguments in the constructor method! - the library does not set
session.use_strict_mode
anymore - see #37 - updated documentation regarding what configuration options are set automatically
- lots of minor bug fixes and source code formatting because we are now using PHPStan for static code analysis and PHP CodeSniffer for detecting coding standards violations, which are now PSR12-ish with a few of the rules excluded
3.1.0
3.0.0
- added integration with PDO
- implemented prepared statemets as
mysqli_real_escape_string
may not be secure enough when used with PHP <5.7.6
; see this for more information; thanks duckboy81 for suggesting - sessions can now be started in read-only mode thus not having to do row locks; see #26; thanks more7dev!
- session.use_strict_mode is now always enabled by the library automatically; thanks dnanusevski for suggesting
- session.cookie_secure is now automatically enabled by the library if HTTPS connection is detected; thanks dnanusevski for suggesting
- fixed issue when using special characters in table name; see #27; thanks more7dev!
- added option for disabling automatically starting the session; see #28; thanks Nick Muerdter for the pull request!
- minimum required PHP version has changed from
5.1.0
to5.5.2
2.1.10
2.1.9
- fixed #16 where the maximum length for lock keys in MySQL 5.7.5+ is limited to 64 characters; thanks to Andreas Heissenberger for providing the fix!
- the library now destroys previous sessions when started
- database errors now throw exceptions instead of dying; thanks Jonathon Hill
2.1.8
- documentation is now available in the repository and on GitHub
- the home of the library is now exclusively on GitHub
2.1.7
- security tweaks (setting
session.cookie_httponly
andsession.use_only_cookies
to 1 by default) - the stop() method will now also remove the associated cookie