Re: Would appreciate thoughts on session management

Michael Sims wrote... > It's always been my experience that trans sid doesn't append the SID to header > redirects. You have to do it manually (I use the SID constant for this > purpose). When I test on a browser with cookies disabled, I imagine I'll find that I have to do that. That's okay, though. > Of course, the above would work for clients that send the appropriate cookie, > but if you're using cookies anyway why go to all this trouble? Because (for example) you can't have a button on your page that adjusts a property (represented as a PHP session variable) of some object on a page. Instead, you have to use GET variables, PUT variables or cookies to pass data to the next page. GET variables seem to be the best choice for non-form items. The problem with GET variables is that, normally, you see them in the address bar. This is user-unfriendly, allows people to bookmark URLs that won't work outside of their session, etc. Today alone, 3 out of 4 URLs that people IM'd me didn't work, because they were filled with session-specific properties. <http://www.getsome.com/?spinnerValue=38> My Invisible GET method avoids all of this. <http://www.getsome.com/> -- Charles Wiltgen