centersl/nextcloud-docs
1
0
Fork 0
mirror of https://github.com/nextcloud/documentation.git synced 2026-03-26 13:28:45 +07:00
Code Issues Packages Projects Releases Wiki Activity

chore: update session docs based on review feedback

Browse Source 
Signed-off-by: Josh <josh.t.richards@gmail.com>
This commit is contained in:
Josh
2026-02-01 12:12:52 -05:00
committed by GitHub
parent a637254daf
commit 495f4ead4b
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
developer_manual/basics/controllers.rst
View File

@@ -232,8 +232,8 @@ transparent encryption layer via the ``CryptoSessionData`` class. Data written t
``OCP\ISession`` API benefits from these optimizations and is automatically encrypted at rest.
.. danger::
Never use PHP superglobals like ``$_SESSION``. This bypasses Nextcloud's encryption and
lifecycle management. leading to race conditions or lost data.
Never use the PHP superglobal ``$_SESSION``. The superglobal bypasses Nextcloud's encryption and
lifecycle management, leading to race conditions or lost data.
Basic usage
~~~~~~~~~~~
@@ -305,6 +305,9 @@ Use the ``#[UseSession]`` attribute when:
I/O overhead from repeated open/close cycles).
* **Reference Manipulation**: You need the session to remain open for complex logic or to ensure data
consistency throughout the method.
* **Regenerating session ids**: You are elevating a user's privileges (e.g. a valid share password is
entered and the "access granted" status is stored in the session) or the user performs a sensitive
alteration (e.g. password change).
.. note::
The ``#[UseSession]`` attribute was introduced in Nextcloud 26. Previously, this feature used the