PHP-Secure-Session

PHP-Secure-Session copied to clipboard

SessionHandler compatibility in PHP 8

1

PHP 8 (not sure which minor exactly) introduced types to the SessionHandler/SessionHandlerInterface which is incompatible with the current implementation of this library. ``` Deprecated: Return type of PHPSecureSession\SecureHandler::open($save_path, $session_name) should...

Mark-H

Decouple encryption/signing logic

2

To provide a way to use different mechanism e.g. sodium (https://github.com/paragonie/sodium_compat) or some no-op logic for usage in tests.

b1rdex

Was using this in a project using PHP 7.3.0+ and it was a requirement to set the 'SameSite' cookie option, which worked fine for the actual session cookie, but not...

zubfatal