Skip to content
This repository has been archived by the owner on Jan 31, 2020. It is now read-only.

Class Validator\Id is not compatible with PHP 7.1 #112

Closed
2 tasks done
mannatera opened this issue Jun 14, 2018 · 1 comment · Fixed by #114
Closed
2 tasks done

Class Validator\Id is not compatible with PHP 7.1 #112

mannatera opened this issue Jun 14, 2018 · 1 comment · Fixed by #114
Assignees
Labels
Milestone

Comments

@mannatera
Copy link

Session Id validator uses hash_bits_per_character ini setting to validate the id. This setting is deprecated since PHP 7.1 (http://php.net/manual/en/session.configuration.php#ini.session.hash-bits-per-character). This causes the default validator to fail and starting sessions is not possible with default session config.

Code to reproduce the issue

$session = $sm->get(\Zend\Session\ManagerInterface::class);
$session->start();

Expected results

Should not throw Session validation failed RuntimeException

Actual results

Throws validation failed exception

@digitalStyx
Copy link

Hi, I also have a problem.

I use PHP 7.2.17.
My admin wants to change the session.sid_bits_per_character to 6 for security reasons. But unfortunately he can't do this because session_id will be not validate.

@michalbundyra michalbundyra added this to the 2.8.6 milestone Aug 11, 2019
@michalbundyra michalbundyra self-assigned this Aug 11, 2019
michalbundyra added a commit that referenced this issue Aug 11, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants