Re:Parsing JSON is a Minefield
by mort96 on Wednesday October 26, 2016 @04:48PM
(#12800370)
Remember, it's PHP. Code will be running again on the next request. Only the process (or thread or whatever) handling the request with the invalid JSON crashes, and it only crashes after producing a persistent session; the next request, a different process/thread/whatever will run code, but the session from the previous request still exists.
[ Parent
| on HN ]
I still don't get it. The browser gets the session cookie even though the request processing crashed? Or does another request manage to pick up the session that was dropped from the crashed request?
I don't do PHP. It just sounds incredible to me that so little isolation seems to exist.