Skip to content

Releases: stefangabos/Zebra_Session

4.1.0

08 Sep 17:28
Compare
Choose a tag to compare
  • fixed #49 where the old session_set_save_handler signature with more than 2 arguments was deprecated in PHP 8 and the deprecated signature would become unsupported either in PHP 9.0 or 10.0; the library is still backwards compatible; thanks to Joe Bordes for the heads up!
  • the lock_to_ip argument of the constructor can now also be a callable; see #56; this is a better and more secure fix for #43 and #54; this is also a fix for a very old #7! thanks Andreas Heissenberger for the great idea and the feedback
  • added a fix for using the library with an AWS load balancer; see #43 and #54; thank you Dvelopin!
  • fixed (hopefully) #53 regarding table locks not being released if script execution ended before the library being able to write session data and release the lock
  • fixed an issue where get_settings() would trigger an error if session.gc_divisor is set to 0; this fixes #48 - thanks to Alex!

4.0.0

24 Mar 13:07
Compare
Choose a tag to compare
  • the library doesn't set session.cookie_lifetime to 0 anymore but to the number of seconds specified in the constructor; with this, finally, sessions can be kept alive even if the browser is closed - this fixes #40 and #5
  • the library is not setting gc_probability and gc_divisor properties anymore - this can potentially break your code when updating, as there are now less arguments in the constructor method!
  • the library does not set session.use_strict_mode anymore - see #37
  • updated documentation regarding what configuration options are set automatically
  • lots of minor bug fixes and source code formatting because we are now using PHPStan for static code analysis and PHP CodeSniffer for detecting coding standards violations, which are now PSR12-ish with a few of the rules excluded

3.1.0

01 Jun 05:31
Compare
Choose a tag to compare
  • fixed a bug where sessions became unusable if the user agent was changed after initialization; thanks to poisons77 for the feedback - see #32

3.0.0

22 Feb 19:49
Compare
Choose a tag to compare
  • added integration with PDO
  • implemented prepared statemets as mysqli_real_escape_string may not be secure enough when used with PHP < 5.7.6; see this for more information; thanks duckboy81 for suggesting
  • sessions can now be started in read-only mode thus not having to do row locks; see #26; thanks more7dev!
  • session.use_strict_mode is now always enabled by the library automatically; thanks dnanusevski for suggesting
  • session.cookie_secure is now automatically enabled by the library if HTTPS connection is detected; thanks dnanusevski for suggesting
  • fixed issue when using special characters in table name; see #27; thanks more7dev!
  • added option for disabling automatically starting the session; see #28; thanks Nick Muerdter for the pull request!
  • minimum required PHP version has changed from 5.1.0 to 5.5.2

2.1.10

05 Jan 14:29
Compare
Choose a tag to compare
  • fixed bug because of incorrect logic; thanks RolandD!

2.1.9

03 Jan 12:15
Compare
Choose a tag to compare
  • fixed #16 where the maximum length for lock keys in MySQL 5.7.5+ is limited to 64 characters; thanks to Andreas Heissenberger for providing the fix!
  • the library now destroys previous sessions when started
  • database errors now throw exceptions instead of dying; thanks Jonathon Hill

2.1.8

20 May 20:38
Compare
Choose a tag to compare
  • documentation is now available in the repository and on GitHub
  • the home of the library is now exclusively on GitHub

2.1.7

01 May 09:37
Compare
Choose a tag to compare
  • security tweaks (setting session.cookie_httponly and session.use_only_cookies to 1 by default)
  • the stop() method will now also remove the associated cookie

2.1.6

19 Apr 08:53
Compare
Choose a tag to compare
  • hopefully #13 is now fixed for good

2.1.5

11 Apr 12:12
Compare
Choose a tag to compare
  • closed #11; thanks @soren121
  • fixed (hopefully) #13; thanks to @alisonw for providing the current fix
  • reduced overall code complexity