Merge pull request #239 from jdeathe/issue/233

CLOSES #233: Adds PHP 5 applicable session settings into service configuration.

Author: jdeathe

CHANGELOG.md

@@ -4,6 +4,10 @@
 
 Summary of release changes.
 
+### 1.13.2 - Unreleased
+
+- Adds PHP 5 applicable session settings into service configuration.
+
 ### 1.13.1 - 2019-07-28
 
 - Updates php-hello-world to [0.13.0](https://github.com/jdeathe/php-hello-world/releases/tag/0.13.0).

Dockerfile

@@ -49,7 +49,7 @@ ADD src /
 # - Disable Apache default fcgid configuration; replaced with 00-fcgid.conf
 # - Disable the default SSL Virtual Host
 # - Disable SSL
-# - Add default PHP configuration overrides to 00-php.ini drop-in.
+# - Add default PHP configuration overrides to 00-php.ini drop-in
 # - APC configuration
 # - Replace placeholders with values in systemd service unit template
 # - Set permissions
@@ -159,6 +159,8 @@ RUN useradd -r -M -d /var/www/app -s /sbin/nologin app \
 		-e 's~^;?(realpath_cache_size( )?=).*$~\1\24096k~' \
 		-e 's~^;?(realpath_cache_ttl( )?=).*$~\1\2600~' \
 		-e 's~^;?(session.cookie_httponly( )?=).*$~\1\21~' \
+		-e 's~^;?(session.hash_bits_per_character( )?=).*$~\1\25~' \
+		-e 's~^;?(session.hash_function( )?=).*$~\1\2sha256~' \
 		-e 's~^;?(session.name( )?=).*$~\1\2"${PHP_OPTIONS_SESSION_NAME:-PHPSESSID}"~' \
 		-e 's~^;?(session.save_handler( )?=).*$~\1\2"${PHP_OPTIONS_SESSION_SAVE_HANDLER:-files}"~' \
 		-e 's~^;?(session.save_path( )?=).*$~\1\2"${PHP_OPTIONS_SESSION_SAVE_PATH:-/var/lib/php/session}"~' \