Re: sessions, SIDs, and php 4.3

--- David T-G <davidtg-php@justpickone.org> wrote: > BTW, the same URL with .phps will let you see the PHP source. Well, hopefully only because you have a duplicate file (or a link) by that name. :-) Also, I meant view source as in the HTML output, not the PHP. > % PHP is doing the session.use_trans_sid stuff correctly, your URLs > % should all be rewritten to include the session identifier. This > % would be my first step in trying to debug the situation. > > It does not. Well, then you problem is found. Why this is happening is still a mystery (to me), but the session.use_trans_sid magic is not happening. If you look at the output of phpinfo() on this exact same script, is the local value of session.use_trans_sid still 1? Chris ===== Chris Shiflett - http://shiflett.org/ PHP Security Handbook Coming mid-2004 HTTP Developer's Handbook http://httphandbook.org/ RAMP Training Courses http://www.nyphp.org/ramp