Re: Would appreciate thoughts on session management
| From: | Pablo | Date: | Tue, 12 Nov 2002 17:09:56 +0000 |
| Subject: | Re: Would appreciate thoughts on session management | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-124023@lists.php.net to get a copy of this message | ||
On 11/12/02 10:15 AM, Charles Wiltgen (lists@wiltgen.net) wrote:
>> So, your URLs will actually look like
>> http://www.site.com/article.php?PHPSESSID=12413523245546453
>
> No problem, since the user will never see this and other session properties
> using this Invisible Get method even with cookies disabled.
Your method assumes something about your users: that they click on links.
This may be unlikely, but what if a user uses the 'copy URL to clipboard'
(or equivalent) feature of their browser? It could be pasted into an e-mail,
posted to a newsgroup, etc.
While 'Invisible Gets' may handle the general case, they do not entirely
solve the problem.
Pablo