All notable changes to this project will be documented in this file, in reverse chronological order by release.
- Nothing.
- Nothing.
- Nothing.
- Nothing.
- Nothing.
- Nothing.
- Nothing.
- Nothing.
- Nothing.
- #123 fixes a bug preventing two first hash functions from
hash_algos()(usuallymd2andmd4) from being used inSessionConfig::setHashFunction.
- #115 adds support for PHP 7.3.
- Nothing.
- Nothing.
- #115 removes support for zend-stdlib v2 releases.
- Nothing.
- Nothing.
- Nothing.
- Nothing.
- Nothing.
- #122 fixes type check for configuration of session storage. Allows input to be an instance of ArrayAccess or an array.
- Nothing.
- Nothing.
- Nothing.
- Nothing.
-
#120 fixes issue "Commands out of sync; you can't run this command now" with DbTableGateway save handler while using Mysqli adapter.
-
#106 fixes issue with Garbage collection of MongoDB save handler where maxlifetime is provided in seconds.
-
#114 fixes Validator\Id compatibility with PHP 7.1. INI setting
session.sid_bits_per_charactercan be now used with PHP 7.1+ instead ofsession.hash_bits_per_character(used with PHP versions prior to 7.1).In some very specific situations this can lead to an issue with previously generated sessions. See issue #121.
-
#118 avoid unnecessary phpinfo() call when register own save handler which is an object.
- Nothing.
- Nothing.
- Nothing.
- Nothing.
- #108 fixes a dependency
conflict in
composer.jsonwhich preventedphpunit/phpunit6.5 or newer from being installed together withzendframework/zend-session.
- Nothing.
- Nothing.
- Nothing.
- Nothing.
-
#107 fixes an error raised by
ini_set()withinSessionConfig::setStorageOption()that occurs for certain INI values that cannot be set if the session is active. When this situation occurs, the class performs asession_write_close(), sets the new INI value, and then restarts the session. As such, we recommend that you either set production INI values in your productionphp.ini, and/or always pass your fully configured session manager to container instances you create. -
#105 fixes an edge case whereby if the special
__ZFsession value is a non-array value, initializing the session would result in errors. -
#102 fixes an issue introduced with 2.8.0 with
AbstractContainer::offsetGet. Starting in 2.8.0, if the provided$keydid not exist, the method would raise an error regarding an invalid variable reference; this release provides a fix that resolves that issue.
- Nothing.
- Nothing.
- Nothing.
- Nothing.
- #101 fixes an issue created with the 2.8.2 release with regards to setting a session save path for non-files save handlers; prior to this patch, incorrect validations were run on the path provided, leading to unexpected exceptions being raised.
- Nothing.
- Nothing.
- Nothing.
- Nothing.
-
#85 fixes an issue with how the expiration seconds are handled when a long-running request occurs. Previously, when called, it would use the value of
$_SERVER['REQUEST_TIME']to calculate the expiration time; this would cause failures if the expiration seconds had been reached by the time the value was set. It now correctly uses the currenttime(). -
#99 fixes how
Zend\Session\Config\SessionConfighandles attaching save handlers to ensure it will honor any handlers registered with the PHP engine (e.g., redis, rediscluster, etc.).
- #92 adds PHP 7.2 support.
- Nothing.
- Nothing.
- #57 and
#93 provide a fix
for when data found in the session is a
Traversable; such data is now cast to an array before merging with new data.
- #78 adds support for
PHP 7.1, and specifically the following options:
session.sid_lengthsession.sid_bits_per_character
-
#73 modifies the
SessionManagerFactoryto take into account the$requestedName; if the$requestedNameis the name of a class that implementsManagerInterface, that class will be instantiated instead ofSessionManager, but using the same arguments ($config, $storage, $savehandler, $validators, $options). -
#78 updates the
SessionConfigclass to emit deprecation notices under PHP 7.1+ when a user attempts to set INI options no longer supported by PHP 7.1+, including:session.entropy_filesession.entropy_lengthsession.hash_functionsession.hash_bits_per_character
- Nothing.
- Nothing.
- Nothing.
- Nothing.
- Nothing.
- #66 fixes how the
Cachesave handler'sdestroy()method works, ensuring it does not attempt to remove an item by$idif it does not already exist in the cache. - #79 updates the
signature of
AbstractContainer::offsetGet()to matchZend\Stdlib\ArrayObjectand return by reference, fixing an issue when running under PHP 7.1+.
- Nothing.
- Nothing.
- Nothing.
- #51 provides a fix to
the
DbTableGatewaysave handler to prevent infinite recursion when attempting to destroy an expired record during initial read operations. - #45 updates the
SessionManager::regenerateId()method to only regenerate the identifier if a session already exists.
- Nothing.
- Nothing.
- Nothing.
- #46 provides fixes to
each of the
CacheandDbTaleGatewaysave handlers to ensure they work when used under PHP 7.
- #40 adds and publishes the documentation to https://zendframework.github.io/zend-session/
- Nothing.
- Nothing.
- #38 ensures that the
value from
session.gc_maxlifetimeis cast to an integer before assigning it as thelifetimevalue in theMongoDBadapter, ensuring sessions may be deleted.
- #23 provides a new
Idvalidator to ensure that the session identifier is not malformed. This validator is now enabled by default; to disable it, pass['attach_default_validators' => false]as the fifth argument toSessionManager, or pass anoptionsarray with that value under thesession_managerconfiguration key. - #34 adds the option
to use
exporeAfterSecondswith theMongoDBsave handler. - #37 exposes the
package as a standalone config-provider/component, adding:
Zend\Session\ConfigProvider, which maps the default services offered by the package, including theContainerAbstractServiceFactory.Zend\Session\Module, which does the same, but for zend-mvc contexts.
- Nothing.
- Nothing.
- #34 updates the
component to use ext/mongodb + the MongoDB PHP client library, instead of
ext/mongo, for purposes of the
MongoDBsave handler, allowing the component to be used with modern MongoDB installations.
- Nothing.
- Nothing.
- Nothing.
- #32 provides a better
polfill for the
ValidatorChainto ensure it can be represented in auto-generated classmaps (e.g., viacomposer dump-autoload --optimizeand/orcomposer dump-autoload --classmap-authoritative).
- Nothing.
- Nothing.
- Nothing.
- #29 extracts the
constructor defined in
Zend\Session\Validator\ValidatorChainTraitand pushes it into each of theValidatorChainEM2andValidatorChainEM3implementations, to prevent colliding constructor definitions due to inheritance + trait usage.
- #29 adds two new
classes:
Zend\Session\Validator\ValidatorChainEM2andValidatorChainEM3. Due to differences in theEventManagerInterface::attach()method between zend-eventmanager v2 and v3, and the fact thatValidatorChainoverrides that method, we now need an implementation targeting each major version. To provide a consistent use case, we use a polyfill that aliases the appropriate version to theZend\Session\ValidatorChainclass.
- Nothing.
- Nothing.
- #29 updates the code to be forwards compatible with the v3 releases of zend-eventmanager and zend-servicemanager.
- #7 Mongo save handler was using sprintf formatting without sprintf.
- Nothing.
- Nothing.
- Nothing.