Allow to set options & handler only if session is not active

sroze · sroze · commit 5be2f4c37709 · 2017-10-11T14:10:26.000+01:00
diff --git a/src/Symfony/Component/HttpFoundation/Session/Storage/NativeSessionStorage.php b/src/Symfony/Component/HttpFoundation/Session/Storage/NativeSessionStorage.php
@@ -90,13 +90,17 @@ public function __construct(array $options = array(), \SessionHandlerInterface $
     {
         $this->setMetadataBag($metaBag);
 
-        if (\PHP_SESSION_ACTIVE !== session_status()) {
+        if (\PHP_SESSION_ACTIVE === session_status()) {
+            if (!empty($options) || null !== $handler) {
+                throw new \LogicException('Cannot change options or handler of an active session');
+            }
+        } else {
             $options += array(
                 // disable by default because it's managed by HeaderBag (if used)
                 'cache_limiter' => '',
                 'use_cookies' => 1,
             );
-
+            
             session_register_shutdown();
 
             $this->setOptions($options);
