Maniphest T431315

Remove PHPSessionHandler and $wgPHPSessionHandling
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	• matmarex
	Jul 6 2026, 3:34 PM

Project Tags

Referenced Files

None

Subscribers

Description

Continuing from T404636: Deprecate PHPSessionHandler and $wgPHPSessionHandling.

I think we'd like to ship this in MW-1.47-release.

Details

Related Changes in Gerrit:

	Subject	Author	Repo	Branch	Lines +/-
	Session: Write release notes for $wgPHPSessionHandling removal	Krinkle	mediawiki/core	master	+6 -0
	Remove PHPSessionHandler and $wgPHPSessionHandling	Bartosz Dziewoński	mediawiki/core	master	+20 -1 K
	Setup: Avoid SessionManager::shutdown overhead on load.php and CLI	Krinkle	mediawiki/core	master	+3 -14
	docs: Replace outdated "notable keys" list with link to mediawiki.org	Krinkle	mediawiki/core	master	+5 -145
	SessionManager: remove unused SessionStore::shutdown	Krinkle	mediawiki/core	master	+0 -22
	Remove wikimedia/php-session-serializer	Krinkle	mediawiki/vendor	master	+6 -1 K

Customize query in gerrit

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Stalled		None	T432045 Archive php-session-serializer (around January 2028)
		Resolved		• matmarex	T431315 Remove PHPSessionHandler and $wgPHPSessionHandling

Event Timeline

• matmarex created this task.Jul 6 2026, 3:34 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJul 6 2026, 3:34 PM

• matmarex mentioned this in T430061: Error authenticating user.Jul 6 2026, 3:35 PM

Pppery removed a project: MediaWiki-General.Jul 6 2026, 6:43 PM

• matmarex claimed this task.Jul 13 2026, 3:01 PM

• matmarex moved this task from Inbox, needs triage to Kanban on the MediaWiki-Core-Platform-Team board.

• matmarex edited projects, added: MediaWiki-Core-Platform-Team (Kanban); removed: MediaWiki-Core-Platform-Team.

• matmarex moved this task from Essential Work to Next on the MediaWiki-Core-Platform-Team (Kanban) board.

• matmarex mentioned this in T432045: Archive php-session-serializer (around January 2028).Jul 13 2026, 5:28 PM

• matmarex added a parent task: T432045: Archive php-session-serializer (around January 2028).

Umherirrender moved this task from Untriaged to 2023+ | MW 1.40+ on the Technical-Debt (Deprecation process) board.Jul 15 2026, 5:53 PM

Change #1322795 had a related patch set uploaded (by Bartosz Dziewoński; author: Bartosz Dziewoński):

[mediawiki/core@master] Remove PHPSessionHandler and $wgPHPSessionHandling

https://gerrit.wikimedia.org/r/1322795

gerritbot added a project: Patch-For-Review.Aug 7 2026, 4:09 PM

• matmarex moved this task from Next to In Progress on the MediaWiki-Core-Platform-Team (Kanban) board.Aug 7 2026, 4:11 PM

Krinkle mentioned this in T434399: Disable built-in session handler via php.ini in WMF production.Aug 9 2026, 6:44 PM

Change #1322795 merged by jenkins-bot:

[mediawiki/core@master] Remove PHPSessionHandler and $wgPHPSessionHandling

https://gerrit.wikimedia.org/r/1322795

Change #1323825 had a related patch set uploaded (by Krinkle; author: Krinkle):

[mediawiki/core@master] docs: Remove outdated reference to session_destroy

https://gerrit.wikimedia.org/r/1323825

Change #1323826 had a related patch set uploaded (by Krinkle; author: Krinkle):

[mediawiki/core@master] Setup: Avoid SessionManager::shutdown overhead on load.php and CLI

https://gerrit.wikimedia.org/r/1323826

Change #1323837 had a related patch set uploaded (by Krinkle; author: Krinkle):

[mediawiki/core@master] SessionManager: remove unused SessionStore::shutdown

https://gerrit.wikimedia.org/r/1323837

Change #1323826 merged by jenkins-bot:

[mediawiki/core@master] Setup: Avoid SessionManager::shutdown overhead on load.php and CLI

https://gerrit.wikimedia.org/r/1323826

ReleaseTaggerBot added a project: MW-1.47-notes (1.47.0-wmf.15; 2026-08-11).Aug 10 2026, 12:00 PM

Change #1323961 had a related patch set uploaded (by Krinkle; author: Krinkle):

[mediawiki/vendor@master] Remove wikimedia/php-session-serializer

https://gerrit.wikimedia.org/r/1323961

Change #1323961 merged by jenkins-bot:

[mediawiki/vendor@master] Remove wikimedia/php-session-serializer

https://gerrit.wikimedia.org/r/1323961

Change #1323968 had a related patch set uploaded (by Krinkle; author: Krinkle):

[mediawiki/core@master] Session: Write release notes for $wgPHPSessionHandling removal

https://gerrit.wikimedia.org/r/1323968

Change #1323837 merged by jenkins-bot:

[mediawiki/core@master] SessionManager: remove unused SessionStore::shutdown

https://gerrit.wikimedia.org/r/1323837

Change #1323968 merged by jenkins-bot:

[mediawiki/core@master] Session: Write release notes for $wgPHPSessionHandling removal

https://gerrit.wikimedia.org/r/1323968

Change #1323825 merged by jenkins-bot:

[mediawiki/core@master] docs: Replace outdated "notable keys" list with link to mediawiki.org

https://gerrit.wikimedia.org/r/1323825

Maintenance_bot removed a project: Patch-For-Review.Aug 10 2026, 2:30 PM

• matmarex closed this task as Resolved.Aug 10 2026, 7:47 PM

Krinkle mentioned this in T436425: Investigate possible behavior change in SessionManager.Aug 29 2026, 5:18 AM