Re: PHPSESSID and URL rewriting
| From: | memoimyself at yahoo dot com dot br | Date: | Fri, 20 Feb 2004 14:05:08 +0000 |
| Subject: | Re: PHPSESSID and URL rewriting | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-178355@lists.php.net to get a copy of this message | ||
On 19 Feb 2004 at 17:15, seba wrote:
> Unfortunately I do can not oblige users which will use those pages to
> accept cookies . The pages are for an e-commerce web site. If I use
> the directive session.use_trans_sid = 0 is not possible to MANTAIN THE
> SAME phpsessid value among differents pages, isn t it?
Well, in this case you cannot have your cake and eat it too. Either you expect your users
to accept cookies or you propagate the session ID via the URL string, the former being
safer and more convenient.
Frankly, in this day and age people being afraid of cookies is like girls being afraid that
they'll get pregnant if they kiss a guy. Furthermore, someone who doesn't accept
cookies is shut out from millions of web sites out there, so I shouldn't think you'll find
that many "no-cookie activists".
It is true, however, that some e-commerce sites like Amazon.com propagate session
IDs via the URL string, so you won't be alone if you choose to accommodate users who
won't accept cookies.
Erik