Changes for version 0.25 - 2009-07-01

  • Add the a change_session_id method which can be called after authentication to change the user's session cookie whilst preserving their session data. This can be used to provide protection from Session Fixation attacks. (kmx)

Documentation

Understanding and using sessions.

Modules

Generic Session plugin - ties together server side storage and client side state required to maintain session data.
Base class for session state preservation plugins.
Base class for session storage drivers.
Doesn't really store sessions - useful for tests.
Reusable sanity for session storage engines.