fix bug #32944 (Disabling session.use_cookies doesn't prevent reading session cookies)

diff --git a/ext/session/session.c b/ext/session/session.c
index e649f8105b71f7c4be61bb08d6914e0b5bb0a9a1..06c360ea5aa8bbbb9ac5ca5db6198eb24fc9403f 100644 (file)
--- a/ext/session/session.c
+++ b/ext/session/session.c
@@ -1133,7 +1133,7 @@ PHPAPI void php_session_start(TSRMLS_D)
         */
 
        if (!PS(id)) {
-               if (zend_hash_find(&EG(symbol_table), "_COOKIE",
+               if (PS(use_cookies) && zend_hash_find(&EG(symbol_table), "_COOKIE",
                                        sizeof("_COOKIE"), (void **) &data) == SUCCESS &&
                                Z_TYPE_PP(data) == IS_ARRAY &&
                                zend_hash_find(Z_ARRVAL_PP(data), PS(session_name),