Previous `create_sid` handler remains active when not explicitly overridden

[TimWolla]

Description

The following code:

<?php

ob_start();

session_set_save_handler(
	function ($savePath, $sessionName) {
		var_dump("open");

		return true;
	},
	function () {
		var_dump("close");

		return true;
	},
	function ($id) {
		var_dump("read");

		return '';
	},
	function ($id, $data) {
		var_dump("write");

		return true;
	},
	function ($id) {
		var_dump("destroy");

		return true;
	},
	function ($maxlifetime) {
		var_dump("gc");

		return true;
	},
	function () {
		var_dump("create_sid");

		return 'foo';
	}
);

session_set_save_handler(
	function ($savePath, $sessionName) {
		var_dump("open");

		return true;
	},
	function () {
		var_dump("close");

		return true;
	},
	function ($id) {
		var_dump("read");

		return '';
	},
	function ($id, $data) {
		var_dump("write");

		return true;
	},
	function ($id) {
		var_dump("destroy");

		return true;
	},
	function ($maxlifetime) {
		var_dump("gc");

		return true;
	},
);

session_start();

Resulted in this output:

string(4) "open"
string(10) "create_sid"
string(4) "read"
string(5) "write"
string(5) "close"

But I expected this output instead:

string(4) "open"
string(4) "read"
string(5) "write"
string(5) "close"

PHP Version

PHP 8.4.17 (cli) (built: Jan 18 2026 14:19:44) (NTS)
Copyright (c) The PHP Group
Built by Debian
Zend Engine v4.4.17, Copyright (c) Zend Technologies
    with Zend OPcache v8.4.17, Copyright (c), by Zend Technologies

Operating System

No response

[Girgias]

This is long-standing behaviour that predates the 2022 refactoring, see 5b40d06#diff-22481788aee01357f8e628c9191632d127a78a2ea20cfbf9c3354cdc420d4ff2L2104-L2109

Considering this way of setting the handlers is deprecated I'm inclined to mark this as a won't fix.

[TimWolla]

I'm inclined to mark this as a won't fix.

I'm okay with that. I just wanted to report it for someone to make a decision.

[Girgias]

I'll close this then as Won't fix because this won't be an issue in the future anyway.