Session ID in query string
| From: | Sandy Keathley | Date: | Tue, 04 Jan 2005 16:49:52 +0000 |
| Subject: | Session ID in query string | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-205604@lists.php.net to get a copy of this message | ||
Using PHP 4.3.9, we have these settings:
session.use_cookies = 1
session.use_only_cookies = 1
session.use_trans_sid = 0
(verified by a display of phpinfo() )
with the goal of preventing URLs with session IDs appended. That
works fine, but when a page is validated by W3C, it throws an error,
and indicates that a link on the page (which contains a query string),
also contains the session ID. If I click the link, it doesn't show the
session ID, but W3C can see it.
Any ideas appreciated.
Sandy Keathley