diff --git a/reference/session/ini.xml b/reference/session/ini.xml index e2ac51daf462..0e97a646762d 100644 --- a/reference/session/ini.xml +++ b/reference/session/ini.xml @@ -116,13 +116,13 @@ session.use_only_cookies "1" INI_ALL - + Disabling this setting is deprecated as of PHP 8.4.0. session.referer_check "" INI_ALL - + Setting a non-empty value is deprecated as of PHP 8.4.0. session.cache_limiter @@ -140,19 +140,25 @@ session.use_trans_sid "0" INI_ALL - + Enabling this setting is deprecated as of PHP 8.4.0. session.trans_sid_tags "a=href,area=href,frame=src,form=" INI_ALL - Available as of PHP 7.1.0. + + Available as of PHP 7.1.0. + Changing this setting is deprecated as of PHP 8.4.0. + session.trans_sid_hosts $_SERVER['HTTP_HOST'] INI_ALL - Available as of PHP 7.1.0. + + Available as of PHP 7.1.0. + Setting a non-empty value is deprecated as of PHP 8.4.0. + session.sid_length @@ -456,6 +462,12 @@ found, the embedded session id will be marked as invalid. Defaults to the empty string. + + + Setting session.referer_check to a non-empty value + is deprecated as of PHP 8.4.0. + + @@ -570,6 +582,12 @@ IDs in URLs. Defaults to 1 (enabled). + + + Disabling session.use_only_cookies is deprecated + as of PHP 8.4.0. + + @@ -729,6 +747,12 @@ sid support is enabled or not. Defaults to 0 (disabled). + + + Enabling session.use_trans_sid is deprecated + as of PHP 8.4.0. + + URL based session management has additional security risks @@ -758,12 +782,18 @@ session.trans_sid_tags specifies which HTML tags are rewritten to include session id when transparent sid support is enabled. Defaults to - a=href,area=href,frame=src,input=src,form= + a=href,area=href,frame=src,form= form is special tag. <input hidden="session_id" name="session_name"> is added as form variable. + + + Changing session.trans_sid_tags from its default + value is deprecated as of PHP 8.4.0. + + Before PHP 7.1.0, url_rewriter.tags @@ -787,6 +817,12 @@ Multiple hosts can be specified by ",", no space is allowed between hosts. e.g. php.net,wiki.php.net,bugs.php.net + + + Setting session.trans_sid_hosts to a non-empty + value is deprecated as of PHP 8.4.0. + +