UnionOfRAD/lithium — Issue #305: Php session adapter can write invalid session name to ini
Author: clexmond
Created: 2012-01-30 23:10:22+00:00
State: open

In the constructor:

if (empty($config['session.name'])) {
$config['session.name'] = basename(LITHIUM_APP_PATH);
}

can improperly set the session.name ini setting to a string with a dot (.) in it. This is an invalid string and effectively causes the session_id to change every time session_start() is called. This occurs anytime the lithium app path directory has a dot in it. For example:

/var/www/example.com/

A failing test case will be added shortly.