diff --git a/reference/session/ini.xml b/reference/session/ini.xml
index e2ac51daf462..0e97a646762d 100644
--- a/reference/session/ini.xml
+++ b/reference/session/ini.xml
@@ -116,13 +116,13 @@
session.use_only_cookies"1"INI_ALL
-
+ Disabling this setting is deprecated as of PHP 8.4.0.session.referer_check""INI_ALL
-
+ Setting a non-empty value is deprecated as of PHP 8.4.0.session.cache_limiter
@@ -140,19 +140,25 @@
session.use_trans_sid"0"INI_ALL
-
+ Enabling this setting is deprecated as of PHP 8.4.0.session.trans_sid_tags"a=href,area=href,frame=src,form="INI_ALL
- Available as of PHP 7.1.0.
+
+ Available as of PHP 7.1.0.
+ Changing this setting is deprecated as of PHP 8.4.0.
+ session.trans_sid_hosts$_SERVER['HTTP_HOST']INI_ALL
- Available as of PHP 7.1.0.
+
+ Available as of PHP 7.1.0.
+ Setting a non-empty value is deprecated as of PHP 8.4.0.
+ session.sid_length
@@ -456,6 +462,12 @@
found, the embedded session id will be marked as invalid.
Defaults to the empty string.
+
+
+ Setting session.referer_check to a non-empty value
+ is deprecated as of PHP 8.4.0.
+
+
@@ -570,6 +582,12 @@
IDs in URLs.
Defaults to 1 (enabled).
+
+
+ Disabling session.use_only_cookies is deprecated
+ as of PHP 8.4.0.
+
+
@@ -729,6 +747,12 @@
sid support is enabled or not. Defaults to
0 (disabled).
+
+
+ Enabling session.use_trans_sid is deprecated
+ as of PHP 8.4.0.
+
+
URL based session management has additional security risks
@@ -758,12 +782,18 @@
session.trans_sid_tags specifies which HTML tags
are rewritten to include session id when transparent sid support
is enabled. Defaults to
- a=href,area=href,frame=src,input=src,form=
+ a=href,area=href,frame=src,form=form is special tag. <input hidden="session_id" name="session_name">
is added as form variable.
+
+
+ Changing session.trans_sid_tags from its default
+ value is deprecated as of PHP 8.4.0.
+
+
Before PHP 7.1.0, url_rewriter.tags
@@ -787,6 +817,12 @@
Multiple hosts can be specified by ",", no space is allowed
between hosts. e.g. php.net,wiki.php.net,bugs.php.net
+
+
+ Setting session.trans_sid_hosts to a non-empty
+ value is deprecated as of PHP 8.4.0.
+
+