Re: sessions, SIDs, and php 4.3
| From: | Chris Shiflett | Date: | Thu, 13 Nov 2003 21:38:03 +0000 |
| Subject: | Re: sessions, SIDs, and php 4.3 | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-169582@lists.php.net to get a copy of this message | ||
--- David T-G <davidtg-php@justpickone.org> wrote:
> If I run
>
> http://test.locations.org/sessions/extracting.php
>
> with cookies on, then upon reload $_SESSION[pw] has a value, which is
> expected. If cookies are off, though, it does not, and I do not see the
> SID in the URL even after the click. So I click the other link, wherein
> I specified the SID, and it finally works -- but I thought that PHP was
> supposed to format my URLs the right way for me, and even moreso didn't
> think that I needed the ? because the SID constant is supposed to be
> "smart".
Check your php.ini and see if you can find this:
session.use_trans_sid = 1
You want that to be 1 in order for PHP to do this for you.
Hope that helps.
Chris
=====
Chris Shiflett - http://shiflett.org/
PHP Security Handbook
Coming mid-2004
HTTP Developer's Handbook
http://httphandbook.org/
RAMP Training Courses
http://www.nyphp.org/ramp