[mod_python] Question about Session security

Graham Dumpleton wrote:
> Jim Gallacher wrote ..
> 
>>Dan Eloff wrote:
>>
>>>Good point, mod_python is very flexible. I really like that.
>>>
>>>I have one more question about sessions. Are they saved automatically,
>>>or do I have to explicitly call .save()?
>>
>>You must call save(). I have been thinking about an autosave though. 
>>Anyone else have any thoughts?
> 
> 
> I would vote for NO autosave.
> 
> It is like the IP issue on Session object, by adding it you are potentially
> restricting in what ways it can be used. Ie., what if I want to bail and out
> of a request without saving anything, how would I stop it from saving.
> 
> The ability to save a session object automatically is something that people
> can do easily enough within their own frameworks if they want to, so it
> is probably better off left that way.
> 

It was just a random thought. I'm having one of those days. :)

Jim