summaryrefslogtreecommitdiff
path: root/src/sp_session.c (unfollow)
AgeCommit message (Collapse)Author
2026-02-23Simplify formattingChristian Göttsche
The members sid_min_length and sid_max_length are of type unsigned long, thus use %lu instead of %zu and a cast.
2026-02-22Log session ID lengths on failureChristian Göttsche
2024-06-06Fix misc typosChristian Göttsche
2024-06-06Use strict prototypesChristian Göttsche
Use the special value void as parameter for functions taking nor argument.
2022-01-12make session support a runtime check instead of compile timeBen Fuhrmannek
2022-01-11removed a few newlinesBen Fuhrmannek
2021-09-23config is stack allocated now + some code improvements (see details)Ben Fuhrmannek
* for easier memory manegement, the entire sp_config struct was merged into snuffleupagus_globals and allocated on stack where possible * SNUFFLEUPAGUS_G() can be written as SPG(), which is faster to type and easier to read * execution_depth is re-initialized to 0 for each request * function calls with inline string and length parameters consistently use ZEND_STRL instead of sizeof()-1 * execution is actually hooked if recursion protection is enabled * some line breaks were removed to make the code more readable
2021-09-16ported sid min/max restriction from suhosinBen Fuhrmannek
2021-09-03fixed session encryption in php8 + related test casesBen Fuhrmannek
2021-08-14fixed null pointer dereferenceBen Fuhrmannek
2021-08-03fixed null pointer dereferenceBen Fuhrmannek
2019-06-20Fix snufflepagus_globals linking issues and one mac compatibility issuebef
2019-06-19fix snufflepagus_globals linking issues and one mac compatibility issueBen Fuhrmannek
2019-02-23Try to unify the includesjvoisin
2019-02-23Add php8 to travis and fix php7.4jvoisin
- Use clang-format on the code - Improve portability wrt. php8 - Fix php7.4 compatibility. See https://dustri.org/b/fixing-snuffleupagus-sloppy-comparison-on-array_keys-for-php74.html for a detailed writeup
2019-01-16Fix a compilation warningjvoisin
2019-01-12Fix missing symbol when there is no session supportjvoisin
It's possible to build PHP with sessions as a module, or even without sessions at all. This commit make it possible to use Snuffleupagus on those platforms.
2018-12-26Fix the build for php7.0jvoisin
We only want to prevent crash/infinite recursion, we don't really care about the error/warning messages.
2018-12-26Remove an unnecessary guard against infinite recursion in session handlingjvoisin
This used to be useful in the times of PHP5.4/Suhosin (https://github.com/sektioneins/suhosin/issues/60), but nowadays, php is handling this case on its own.
2018-12-15Improve simulation mode for session cookies (#259)jvoisin
Since decrypt_zval doesn't provide a way to tell apart failed and successful decryption when used in simulation mode, we'll have to restore the original value if something goes wrong, because crypto_secretbox_open might modify the value.
2018-10-06Bump coverage againjvoisin
2018-10-06Bump a bit the coveragejvoisin
* `setcookie` doesn't always return `true` anymore * clang-format * Cookies with invalid decryption are dropped, but the request isn't anymore * faulty unserialize are now dumpable
2018-09-03Add a const attribute, added in 7.3Remi Collet
2018-08-30Minor code cleanupxXx-caillou-xXx
2018-08-28Fix some compilation warningsxXx-caillou-xXx
2018-07-18Remove an useless check in session handlingkka
2018-07-13Massively optimize how rules are handledxXx-caillou-xXx
This commit does a lot of things: - Use hashtables instead of lists to store the rules - Rules that can be applied at launch time won't be tried at runtime - Improve feedback when writing nonsensical rules - Make intensive use of `zend_string` instead of `char*`
2018-06-28Better handling of filters for builtinskkadosh
2018-05-29Support session encryptionkkadosh
Implement session encryption.