SID via POST without Cookies?
| From: | RW-NL) | Date: | Fri, 25 Apr 2003 09:23:34 +0000 |
| Subject: | SID via POST without Cookies? | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-145233@lists.php.net to get a copy of this message | ||
(Cookies disabled) Using the session id SID or PHPSESSID, puts the
session-id-string in the url, as if it was a GET. This is not secure enough.
Is there no way to POST the session id to the other page, so the PHPSESSID
is not visible?
Greets,
Marvin Vek