Jacques wrote:
Hi all

Is it possible that the PHP engine can generate duplicate session id's for one application? Can one assume that the session id generated and saved in a database will always be unique (never to be repeated)?

there is no garantee stated anywhere that I have read but the following
ini settings might help you to achieve a level of assurance thats acceptable:

session.entropy_file
session.entropy_length

(Available since PHP 5.0.0.):

session.hash_function
session.hash_bits_per_character

http://php.net/manual/en/ref.session.php


Regards

Jacques

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to