Bug #18105: PHPSESSID started showing in url after upgrade

From: justincouto@msn.com Operating system: FreeBSD PHP version: 4.2.1 PHP Bug Type: Session related Bug description: PHPSESSID started showing in url after upgrade Today I upgraded one of my servers to use Apache 1.3.26 after the recent exploit found in it. I decided to also get current on my php install. As a result, I installed PHP 4.2.1. I used the same configure commands as I did on my prior installs. Everything went as expected except for one thing. After getting everything up and running I started going through some of my php apps that use sessions and noticed that when the session 1st starts, all urls that are relative /index.php show the PHPSESSID in the url. On the otherhand, all urls that are absolute http://www.foo.com/index.php the PHPSESSID doesn't show up. I have another server that runs the prior to this upgrade configuration and it doesn't show the PHPSESSID in any urls at all and this sever didn't either before this upgrade. Both configurations have the session.use_trans_sid set to 1. Ha ssomething changed in php 4.2.1 from php 4.1.2 that would cause this to happen. I have checked all of the news groups and can't find an answer to this question. I have also tried to get and answer on IRC. I hope you can help. Thanks, Justin -- Edit bug report at http://bugs.php.net/?id=18105&edit=1 -- Fixed in CVS: http://bugs.php.net/fix.php?id=18105&r=fixedcvs Fixed in release: http://bugs.php.net/fix.php?id=18105&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=18105&r=needtrace Try newer version: http://bugs.php.net/fix.php?id=18105&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=18105&r=support Expected behavior: http://bugs.php.net/fix.php?id=18105&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=18105&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=18105&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=18105&r=globals