RE: [PHP] SID via POST without Cookies?
| From: | John W. Holmes | Date: | Fri, 25 Apr 2003 09:26:07 +0000 |
| Subject: | RE: [PHP] SID via POST without Cookies? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-145234@lists.php.net to get a copy of this message | ||
> (Cookies disabled) Using the session id SID or PHPSESSID, puts the
> session-id-string in the url, as if it was a GET. This is not secure
> enough.
>
> Is there no way to POST the session id to the other page, so the
PHPSESSID
> is not visible?
Put it as a hidden element in a form. POST is no more secure than GET,
btw.
---John W. Holmes...
PHP Architect - A monthly magazine for PHP Professionals. Get your copy
today. http://www.phparch.com/